Stable releases of August 7, 2026¶
Everything that shipped on the stable channel on August 7, 2026 — v2.7.3 through v2.8.0, newest first. v2.8.0 is what you install; the versions below it are how you get there.
Stable v2.8.0¶
- fix(release): keep demo-scoped commits out of release changelogs
- feat(mail): deliverability dashboard + worker
- feat(packages): per-package PHP defaults for new sites
- fix(nginx): correct + harden the nginx.conf vhost-include ownership
- feat(backup): manually delete a single backup snapshot
- feat(mail): per-domain deliverability score (A–F)
- fix(sites): allow force-delete when the site's server is unreachable
- fix(multiserver): guard node deletion against mail-only subscriptions
Stable v2.8.0¶
- feat(security): PHP support & patch-level check for untracked versions
- fix(security): include PHP in the CVE feeds
Stable v2.7.4¶
- fix(security): finish quota-bypass fix for site-nested resources
- fix(security): quota-bypass + errordoc path traversal (round-2 retry)
- fix(security): resolve 6 bugs found by round-2 adversarial review
Stable v2.7.4¶
- Maintenance and stability improvements
Stable v2.7.3¶
- feat(setup): explicit Let's Encrypt opt-in + live result in the wizard
Stable v2.7.3¶
- fix(security): resolve 11 bugs found by the adversarial code review