Stable releases of September 15, 2026¶

Everything that shipped on the stable channel on September 15, 2026 — v2.9.51 through v2.9.53, newest first. v2.9.53 is what you install; the versions below it are how you get there.

Stable v2.9.53¶

fix(tls-health): probe mail. / email. on the mail port and accept the central cert

Stable v2.9.52¶

fix(mail): mail-host cert must serve on dovecot too — ACME challenge vhost + load order
fix(mail): issue and install a cert for the server's mail hostname
fix(mail): sender whitelist ignored domain entries → mail still scored as spam

Stable v2.9.51¶

fix(mail): autoconfig registry lookup used the wrong cert name → 404, no idempotency
fix(mail): issue autoconfig certs for mail domains on external DNS too
fix(mail): autoconfig vhost must proxy the agent over https, not http
fix(mail): default mail-autoconfig ON so QR-code setup can actually work
fix(nginx): one missing cert must not block every other vhost restore
fix(nginx): stop disabling MTA-STS, autoconfig and groupware vhosts, restore them
fix(security-advisor): os_eol no longer vanishes, server_banner reads nginx -T
fix(security-advisor): three more checks that answered from a proxy
fix(security-advisor): report the SSH settings sshd applies, not a guess
fix(security-advisor): add PHP 8.5 to the EOL table and name its source
fix(security-advisor): two checks that reported safe without having checked