Stable releases of August 20, 2026¶

Everything that shipped on the stable channel on August 20, 2026 — v2.8.34 through v2.8.40, newest first. v2.8.40 is what you install; the versions below it are how you get there.

Stable v2.8.40¶

refactor(webmail): SOGo is the only engine — drop the roundcube setting/reconciler
fix(webmail): keep the panel's real cert on catch-all re-render (no self-signed downgrade)

Stable v2.8.39¶

fix(webmail): re-render panel SOGo block on catch-all (IP-only) installs

Stable v2.8.38¶

docs(mail): device setup (Apple/Android) + DNS-check MTA-STS/TLS-RPT
feat(mail): Apple/Android setup per mailbox + MTA-STS/TLS-RPT in DNS check

Stable v2.8.37¶

fix(webmail): SOGo webmail reachable after cutover + new-mailbox onboarding

Stable v2.8.36¶

docs: SOGo standard webmail + auto-migration + automatic updates

Stable v2.8.35¶

feat(update): opt-out automatic enconf panel/agent updates per channel
fix(backup): stall-watchdog + process-group kill for wedged restic runs

Stable v2.8.34¶

feat(groupware): autonomous Roundcube→SOGo auto-cutover worker
fix(groupware): SOGo auto-install keys on Dovecot presence, not the role string
feat(groupware): SOGo is the default webmail (fresh installs), legacy pinned to Roundcube
fix(groupware): gosec G101 nolint + keep Roundcube on fresh installs
docs: add Groupware (SOGo) page + engine-neutral webmail wording
feat(groupware): P5 — Roundcube retirement (fresh installs + guarded removal)
feat(groupware): P4b — mail. + panel /webmail engine flip
feat(groupware): P4 — webmail engine flip (webmail. + SSO -> SOGo)
feat(groupware): P3 — SOGo webmail SSO (cross-origin-safe, multiserver)
feat(groupware): P2b — Roundcube identity name -> SOGo (signature surfaced)
feat(groupware): P2 — Roundcube contacts -> SOGo migration (verified, idempotent)
feat(groupware): P1 — Sieve script alignment (rules stay active + editable in SOGo)
feat(groupware): P0.4 — TLS cert_registry consolidation (webmail + groupware)
feat(groupware): P0.2 — per-domain groupware. enable flow (multiserver)
feat(groupware): P0.1 — server-level SOGo enablement fan-out (multiserver)
feat(groupware): P0.3 — Sieve foundation for SOGo (filters/vacation editable)
docs: add upgrade/retroactive-migration section to cutover plan
docs: Roundcube->SOGo cutover plan (sensible defaults, verified, multiserver-safe)
docs: note webmail SSO extraction done in cutover audit
refactor: extract webmail SSO into its own WebmailSSOHandler
docs: audit for Roundcube->SOGo webmail cutover
docs(groupware): S6-S9 done — Phase 1 (SOGo v5) complete
feat(groupware): S8 — customer Groupware page + connect links
feat(groupware): S7 — perm_groupware package tier (toolkit checklist)
feat(groupware): S6b — CalDAV/CardDAV payloads in Apple .mobileconfig
feat(groupware): S6a — CalDAV/CardDAV DNS service discovery (RFC 6764)
docs(groupware): S5a done + S5b decision (SOGo-native sharing)
feat(groupware): S5a — groupware account provisioning + SOGo login proof
feat(groupware): S4 — identity-mapping models (GroupwareAccount, Team, TeamMember)
feat(groupware): S3 — nginx reverse-proxy + TLS + groupware. (agent)
feat(groupware): S2 — SOGo config + isolated PostgreSQL DB (agent)
feat(groupware): S1 — on-demand SOGo v5 installer (agent)
feat: per-service load breakdown in admin (web/mail/db/groupware)
plan: mark T5 (.mobileconfig) done
feat(agent): Apple .mobileconfig mail profile (signed, zero-touch) — T5
plan(groupware): T3 mail-autoconfig already exists too; net-new is CalDAV/mobileconfig/teams
plan(groupware): T1/T2 already exist — DNS-check is customer-facing; re-scope
plan: Groupware Phase 1 task breakdown (engine-agnostic, no-regret)
docs(groupware): add binding safety & verification contract (nothing breaks, all verified)
docs(groupware): Option B — SOGo web replaces Roundcube + webmail-swap migration
docs(groupware): architecture + roadmap — SOGo v5→v6, teams, zero-touch client provisioning
fix(release): stable releases must publish signed SHA256SUMS (G10)