[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/maathimself/mailflow-backend	minor	4.1.2 → 4.3.1
ghcr.io/maathimself/mailflow-frontend	minor	4.1.2 → 4.3.1

---

Release Notes

maathimself/mailflow (ghcr.io/maathimself/mailflow-backend)

v4.3.1: MailFlow v4.3.1

Compare Source

MailFlow v4.3.1

This release is mostly about reliability: read state and stars that stay in step with your other mail apps, nothing lost behind the screen lock or when you close the tab during Undo, and snooze, drafts and scheduled send holding up when the server or the network misbehaves. It also adds Mark as read and Archive buttons to new-mail notifications. Thanks to @​adolfoflores for the drafts fix, to @​salmonumbrella for the GTD header states, the Gmail label fix, the readable full headers and the toolbar report, to @​Jake-double-one for the notification actions idea, and to @​McFlyegy for the email layout report.

New

• Actions on new-mail notifications (#​689). A push notification for a single new message has Mark as read and Archive buttons, in Chrome, Edge and other Chromium browsers and on Android. Firefox and Safari show the notification as before.
• GTD states in the message header (#​681). With the GTD plugin on, the reading pane header shows the message's GTD state.

Fixes

Sync and read state

• Read and star changes made in another mail app on older messages now reach MailFlow. Before, only the newest 5,000 messages of a folder were checked. Unread counts that drifted from the server are repaired.
• Changing an account's spam filtering or categorization takes effect without reconnecting, and a renewed Microsoft sign-in is kept.
• Mark all as read also reaches a message's Gmail label copies, and tries again if the server write fails.
• A message moved by a server that gives it no new id keeps its spam verdict, category and other MailFlow state.
• A Gmail label copy is saved before other sessions refresh the folder (#​754), and a message taken out of a Gmail label (as GTD's Done does) no longer flickers back unread.
• Sync now gives up after a minute instead of hanging, and an account turned off while it is connecting stays off.
• A message the server won't hand over is skipped instead of stalling the download of older mail.

Composing and sending

• The screen lock keeps what the composer holds, attachments included.
• Archive, move, spam and snooze actions still in their Undo window are carried out when you close the tab or the screen locks, instead of being lost.
• Undo of Send later keeps the draft's attachments.
• A scheduled send whose sign-in refresh can't reach the network tries again instead of failing.
• Drafts are saved with the line endings mail servers expect (#​761). On PurelyMail and similar servers, old copies of a draft piled up in Drafts and a reply draft could get stuck.
• On servers without UIDPLUS, a saved draft is found again by its Message-ID, so it is replaced instead of copied.
• When a Sent copy hasn't appeared after sending, MailFlow checks Sent again a minute later.

Snooze

• A snoozed message that wakes up no longer shows in both the Inbox and Snoozed, or counts as new mail.
• A message snoozed from a folder that has since been deleted comes back to the Inbox.

Reading and the message list

• A reply that arrives while its conversation is open shows up in it, closed and unread, and the conversation stays open.
• HTML emails with a fixed-width layout keep their width and centering instead of being stretched across the reading pane (#​757).
• The list toolbar controls line up, and wrap below the folder name instead of spilling out of a narrow list or with longer translations (#​766).
• Field names in Full headers are readable again (#​752).
• With Starred on top, Undo puts a conversation back where it was.
• The folder list refreshes after you clear a search, a next page that loads after you switched folders is dropped, a failed account load at startup is tried again, and Sync now reloads the list even without a live connection.

Upgrading

ghcr.io/maathimself/mailflow-backend:latest points at 4.3.1, published for amd64 and arm64. No database migrations and no compose file changes.

---

MailFlow is built and maintained by one person. If it's useful to you, you can support it on GitHub Sponsors or Ko-fi. Using MailFlow in a business? A business license supports development too. Thank you to everyone who already does.

v4.3.0: MailFlow v4.3.0

Compare Source

MailFlow v4.3.0

This release adds personal API tokens, so scripts and tools such as an MCP server can use MailFlow without your password. It also asks you to confirm before a single sign-on identity is linked to your account, keeps a draft's attachments when you reopen it, and fixes printing in the desktop app. Thanks to @​Monkey7539 for API tokens, the link confirmation and the sign-in fixes, to @​salmonumbrella for the Gmail identity fix and the test timing fix, to @​dcoffin88 for the print fix, to @​amartidandqdq for draft attachments in the API, and to @​Azathoth88 for bringing the contributor notes up to date.

New

• API tokens (#​617). Settings → Security has a new API tokens card. A token has scopes: Read lists, reads and searches your mail; Organize marks read, stars, archives, moves, snoozes and sets categories; Draft saves new drafts for you to review. A token can never send, delete or change settings, and nothing it does can move mail into Trash or Junk. Creating one asks for your password, your authenticator code or a fresh single sign-on, and the token is shown once. You can see when each token was last used and revoke it at any time. Tokens are off by default: an administrator turns them on with the switch on the same card, and turning it off stops every user's tokens at once without deleting them.
• Confirm before linking a sign-in provider (#​714). Linking a single sign-on identity to your account now asks for the same confirmation as creating a token: your password, your authenticator code, or a fresh single sign-on. It counts for 5 minutes and for one link. A linked identity signs in without your password or two-factor code, so an open session on its own can no longer add one.
• Attachments when saving a draft through the API (#​721). POST /api/mail/draft accepts up to 5 files, 15 MB in total, for scripts signed in as you. API tokens still save plain text drafts only.

Fixes

• Reopening a draft from Drafts. A draft with attachments, saved in another mail app, opened from the Drafts list without its attachments, and saving it replaced it with a copy that had none. It now opens with its attachments, and if MailFlow can't fetch them, it won't save over the original.
• Deleting a conversation (#​720). Deleting a conversation from the Inbox could permanently delete messages of it that were already in Trash. MailFlow now picks out the Trash copies by the same rule the server uses when it deletes, so those are left alone.
• Printing in the desktop app (#​693). Both print buttons now work in the Windows, macOS and Linux apps.
• Gmail messages across labels (#​722). MailFlow now stores Gmail's own message id, so a Gmail message keeps one identity when it's copied or moved between labels. Other providers are unaffected.
• Signing in after the screen lock (#​730). When a session expired behind the screen lock, the next visit could try to reopen the message that was open before, with nobody signed in. It now reopens it only after you sign in.

Upgrading

ghcr.io/maathimself/mailflow-backend:latest points at 4.3.0, published for amd64 and arm64. Two database migrations run on startup: one adds the API token tables, the other a column for Gmail's message id. Both are quick. No compose file changes since 4.1.0.

---

MailFlow is built and maintained by one person. If it's useful to you, you can support it on GitHub Sponsors or Ko-fi. Using MailFlow in a business? A business license supports development too. Thank you to everyone who already does.

v4.2.0: MailFlow v4.2.0

Compare Source

MailFlow v4.2.0

This release is about finding and scanning mail: you can sort any folder by date, sender or subject, keep starred mail on top, see how many messages each category holds, and use a new List first layout that gives the message list the whole window. It also fixes account order, Undo and single sign-on bugs. Thanks to @​Monkey7539 for the Cc and Bcc fix, and to @​brmiller, @​stiffx, @​shady2k and @​thecoffeebin for the requests behind this release.

New

• Sort a folder by date, sender or subject (#​528). The sort button in the list header orders the folder either way. Subject sort ignores Re: and Fwd:, and in conversation view a conversation sorts by its first sender and subject, which is what its row shows. Each folder remembers its own order, and the order follows you to your other devices. When a folder isn't newest first, the button says how it's sorted, and Back to newest first resets it. Search, Snoozed, Scheduled and the GTD tabs keep their own order.
• Starred on top (#​196). In the same menu, a switch per folder keeps starred mail above the rest. It uses the star you already have, so it works with what you star in other mail apps too.
• List first layout (#​596). A new layout in the layout picker. The message list takes the whole window, and a message opens in its place, with Back, previous and next at the top. Back, Escape or the browser's Back button return you to the list where you left it. The other layouts are unchanged.
• Category totals (#​597). Category tabs now show how many messages each holds, with the unread count apart, so a category whose mail is all read no longer looks empty. An empty category says which category is empty, not that the whole Inbox is.
• Drafts count (#​643). Drafts in the sidebar shows how many drafts are waiting, drafts saved in other mail apps included. It's outlined rather than filled, so it doesn't read as unread mail.

Fixes

• Account order (#​695). Moving an account up or down in the sidebar sometimes didn't stick after a reload. The whole order is now saved at once.
• Undo after switching folders (#​630). Undoing an archive or delete after opening another folder could show the message in that folder until a reload. It now goes back only to the list it came from.
• Opening Cc and Bcc (#​716). Clicking Cc or Bcc in the composer now puts the cursor in that field, and on a phone the keyboard comes up.
• Single sign-on accounts (#​714). Linking and unlinking a sign-in provider now shows in the security log. A password reset removes linked sign-in providers while password sign-in is on, so a reset really does lock out whoever had the old access. Admins can see and unlink a user's providers in the user editor.

Upgrading

ghcr.io/maathimself/mailflow-backend:latest points at 4.2.0, published for amd64 and arm64. One database migration runs on startup and renumbers the account order. No compose file changes since 4.1.0.

---

MailFlow is built and maintained by one person. If it's useful to you, you can support it on GitHub Sponsors or Ko-fi. Using MailFlow in a business? A business license supports development too. Thank you to everyone who already does.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 7a1e73fe-2b8e-4173-942c-b225051f250e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn