Postbox v1.2.3

Postbox v1.2.3 brings account preferences, clearer campaign workflows, improved Sendy migration, and security and reliability fixes since v1.0.0.

Accounts and settings

• Separate account, brand, and system settings with correctly scoped ownership and access.
• Add user display names, sidebar account identity, account timezone preferences, and the ability to change your sign-in email.
• Add optional Cloudflare Turnstile protection to sign-in, fix TOTP sign-in and session transitions, and clarify passkey registration requirements.
• Fix direct navigation to settings pages and reduce unwanted password autofill in account security forms.

Campaigns and email editing

• Improve the email editor toolbar, preview layouts, campaign preflight review, and test-send feedback.
• Add template plain-text overrides and a name fallback merge tag, including support in sample previews.
• Make campaign link checks advisory, preserve draft edits during initial saves, and reuse the campaign editor for collapsible message settings.
• Fix browser-view and unsubscribe links in test emails, saved previews using opaque tokens, and blank previews caused by invalid merge tags.
• Correct campaign country names and table sorting; improve campaign actions and handling of deleted or unavailable audiences.

Subscribers and subscription pages

• Add suppression search and filters, subscriber last-activity sorting, and a created-at column.
• Improve subscriber profile and segment dialogs, import forms, table styling, status badges, and dark-mode readability.
• Refresh subscription and unsubscribe pages with sender branding, dark-mode support, and previews that match the live pages.
• Default unsubscribe choices to the campaign's matching lists and simplify public unsubscribe pages.
• Separate webhook activation from event selection and add configurable failed-job retention.

Sendy migration and reporting

• Recover imported campaign outcome statistics and archive imported Sendy campaigns as finished.
• Import blocked domains, handle SQL dumps containing executable comments, and remove the Sendy prefix from imported public IDs.
• Suppress subscriber webhooks during CSV imports and make cancelled campaign reports accessible.
• Add administrator brand and campaign deletion and expose list API IDs.
• Add Amazon SES status and sending quota to the overview, persist the selected reporting date range, and simplify overview charts and the SES status footer.

Security and reliability

• Bind tracking links and send receipts to immutable identities and support both known tracking migration histories through a forward migration.
• Revalidate credentials during session creation, centralize HTML security policies, and protect public pages from proxy injection.
• Fix SNS signing certificate verification when intermediates are missing, bound verifier caching, and improve callback and background failure diagnostics.
• Improve lifecycle cleanup, batch audience and subscriber operations, move rendering preparation outside the SQLite writer, and index latest subscriber activity.
• Strengthen backup recurrence coverage and Compose secret handling, with regression coverage for the security and reliability fixes.
• Rebuild bundled frontend assets for v1.2.3, including the settings navigation and segment-dialog fixes.

Docker image

docker pull ghcr.io/cicerbro/postbox:1.2.3

Verified image digest: sha256:a6aada81af58c55a8dd95dda5d83d103005942ea167d6ee808fbb3b5abfa2c2b.

Upgrading from v1.0.0

Back up your database and secrets before upgrading, retain the existing persistent storage, and restart Postbox with the v1.2.3 image. This release includes database migrations for settings, templates, subscriber activity, and tracking identities.

Full changelog: v1.0.0...v1.2.3