Stable releases of August 25, 2026¶

Everything that shipped on the stable channel on August 25, 2026 — v2.9.0 through v2.9.1, newest first. v2.9.1 is what you install; the versions below it are how you get there.

Stable v2.9.1¶

Re-published v2.9.0 under a new version number to guarantee every install receives the complete, corrected build (including the WordPress security-warning fix). No new changes beyond v2.9.0.

Stable v2.9.0¶

Team mailboxes

Shared team mailboxes: manage them directly from the Groupware page
Mailboxes now show up correctly in any IMAP client (not just webmail)
Delete protection: your own primary mailbox (INBOX) can no longer be deleted by accident

Dashboard

Live update console: the self-update progress now shows real progress instead of a rough time estimate
Server table shows live capacity (sites/CPU/RAM/disk)

WordPress toolkit

Security warnings no longer show a contradictory "fixed in version X" claim when the source's own fix version is still inside the vulnerable range

Container hosting

More reliable file ownership inside containers (replaces an unreliable mechanism)

Backup

Restic index now self-repairs when an inconsistency is detected

UI fixes

Various table-layout fixes (uptime status, extensions, domains, servers)
Package editor: tabs are now grouped by topic instead of field type

Stable v2.9.0¶

fix(security): scope the loopback firewall accept-rule to genuine 127.0.0.1/::1