26.0.20260113

• SECURITY and Maintenance Release: strong recommendation to update to this release (or 23.1.20260113) immediately
• Addressbook: Fix renaming distribution list
• Admin/Mail: fix warning about not-a-personal-account was still displayed after changing to a personal one
• Calendar/CalDAV: fix SQL error if event was accepted without changing the status (e.g. accepted twice)
• Filemanager: Fix file a file kept files after uploading them leading to incorrect overwrite prompt
• Kdots: Show new row count in tooltip when row count changes
• Mail: tinymce editor now also uses darkmode (if opened while egw is in darkmode)
• RAG: do NOT execute notify-all hook, if RAG is not installed
• RAG/Tracker/InfoLog: fix not found entry by id
• Search: fix not able to remove search, even if it's no longer displayed in search-box

23.1.20260113

• SECURITY and Maintenance Release: strong recommendation to update to this release (or 26.0.20260113) immediately
• Addressbook: Fix renaming distribution list
• Admin/Mail: fix warning about not-a-personal-account was still displayed after changing to a personal one
• Calendar/CalDAV: fix SQL error if event was accepted without changing the status (e.g. accepted twice)
• Filemanager: Fix file a file kept files after uploading them leading to incorrect overwrite prompt
• Search: fix not able to remove search, even if it's no longer displayed in search-box

26.0.20260108

• SECURITY and Maintenance Release: strong recommendation to update to this release (or 23.1.20260108) immediately
• Many thanks to Łukasz Rybak who found and reported the vulnerability (CVE-2026-22243)
• 3rd 26.x pre-release including new RAG application
• RAG: fulltext index, semantic search and UI to search all apps requiring MariaDB 11.8!
• Kdots: Fix nextmatch letter filter was not shown
• Kdots: Stop app loader covering error messages
• Kdots: Add preference to show application names beside icons in app chooser
• Kdots: Fix opening 2 dialogs did not focus the second one
• Kdots: Block browser context menu
• Addressbook: Change how organisation contacts are shown from "Organisation / Organisation" to "Contact Name / Organisation"
• Addressbook: Hide group distribution list from email search results when group has an email & hiding groups without email address
• Addressbook/CardDAV/REST: fix not working search for phone-numbers (you need at least 9 digits!)
• Api: Fix disabled table cells were breaking nextmatch header
• Api: If app supports RAG search, use RAG's search template
• Api: Sort filter for mobile
• Calendar: replaced img tags with et2-image, to support coloring(darkmode)
• Filemanager: Fix home portlet opened with errors
• Invoices: allow setting or importing non-integer position identifier (BT-126) e.g. 1.1, 1.2, 1.3, 2.1 instead of 1, 2, 3, 4
• Projectmanager: Fix import preview to make sure project members list is not an array
• Status: Fix BigBlueButton meeting couldn't be entered by moderators
• Tracker: Fix completion value was missing in merge or custom notification

23.1.20260108

• SECURITY and Maintenance Release: strong recommendation to update to this release (or 26.0.20260108) immediately
• Many thanks to Łukasz Rybak who found and reported the vulnerability (CVE-2026-22243)
• Addressbook: Hide group distribution list from email search results when group has an email & hiding groups without email address
• Addressbook/CardDAV/REST: fix not working search for phone-numbers (you need at least 9 digits!)
• Invoices: allow setting or importing non-integer position identifier (BT-126) e.g. 1.1, 1.2, 1.3, 2.1 instead of 1, 2, 3, 4

23.1.20251222

• PHP: security update to 8.4.16
• Calendar: fixed not tracked participant-changes in recurring events or recurrence-exceptions
• Calendar: allow slightly wrong Recurrence-ID seen with older Exchange server and ignore name-prefix or case in email-address of participant
• Addressbook: fix focus on not editable name field: open name popup for new contacts or on keyboard for existing ones
• Addressbook/REST API: fix not working unset of single fields or objects with a null value, we also use now consistent "private" instead of "home"
• InfoLog/CalDAV: fix PHP TypeError array_merge() parameter #1 must be of type array, null given happening with Thunderbird and tasks

26.0.20251216

• Calendar: fixed not tracked participant-changes in recurring events or recurrence-exceptions
• Calendar: allow slightly wrong Recurrence-ID seen with older Exchange server and ignore name-prefix or case in email-address of participant
• Calendar: Responsive quick-add template for mobile
• Calendar: change "notify externals" into a checkbox
• Infolog: Support filtering by custom field when the customfield column is hidden
• Kdots: Add timezone switcher
• kdots: Add clear filters button to filter drawer
• Kdots: Fix automatic darkmode did not apply correctly in popups
• Kdots: Fix messages not showing up due to TypeError: str.split is not a function
• Kdots: Enable anchor tags in messages in addition to links
• Et2VfsUpload: Fix overwrite / rename confirmation did not wait for an answer
• Mail: fix not working sending of s/mime encrypted or signed messages
• Mail: Fix missing scroll in mail
• Addressbook: Fix merge into document dialog errored with additional options
• Preferences: fix Security&passwords dialog was not showing Application passwords, Revoke tokens and WebAuthN tabs correct
• Preferences: Get token list working in preferences > Security & Password > Application passwords
• Filemanager: Fix missing anonymous upload success message and refresh
• Filemanager: Fix hidden upload did not upload, did not error
• Filemanager: Fix shared directories did not show new files after upload
• Filemanager: Fix anonymous list UI search, error from missing filter drawer and logo sized too small
• Api: Improve upload widget error display
• Api: Fix missing mobile date widget styling
• Login: remove blue bottom bar in favor of transparent to black gradient, if no stock background image is used

26.0.20251208

• first pre-release for new major release 26
• major feature is the new kDots template / new overall UI
• the release is not yet feature-complete, missing are:
  • new RAG application adding a fulltext index and semantic search
  • some accessibility features, mainly improving the endless scrolling list

23.1.20251119

• Addressbook: fix not working avatar/picture upload
• EMail: fix printing contained only first page
• EMail: fix not working paste of email-addresses with uppercase letters
• EMail: storing mail accounts unchanged accidentally activated Sieve, even if not available
• InfoLog/Timesheet/REST Api: fix and document iterating through huge result-sets via sync-token
• Notifications: preference to also or only notify the private email address (if existing)
• KnowlegeBase: fix not working inserting of pictures from VFS/Filemanager
• All apps: fix drag & drop of attachments to popups
• All apps: fixed many PHP 8.4 Deprecated Warnings - still enough left ;)

23.1.20251021

• VIDOTEACH: introduce new type of video-choice question which causes a jump to one of multiple target-videos
• Mail/Sieve: support numeric comparison to a header e.g. "X-Spam-Score"
• Calendar: get subscriptions working with iCloud (caldav.icloud.com), added autodetection and calendar-selection
• Calendar: allow adding resources to subscribed calendars e.g. for migrating a ressource-calendar to EGroupware
• Calendar: subscription was not correct (un)deleting already synced events, change [Synchronize] button to ignore sync-token or etag
• Calendar: fix iCalendar export adding a seemingly empty line, if (wrapped) line has exactly 75 chars
• Calendar: fix not being able to set no default alarm in calendar preferences by setting it empty
• Calendar: answering NO to question "Apply changes to (future) exceptions too?" behaved like YES
• API/Authentication: new App-password backend to deny authentication with the real password, to force usage of tokens for CalDAV/CardDAV or eSync
• InfoLog/CalDAV: fix typo causing all types to be synchronized via CalDAV ignoring the preference what to sync
• Addressbook/InfoLog/Timessheet/REST-Api: new GET parameter "filters[linked]=:" to return entries linked to given other entry
• LDAP/ADS: fixed account import was not activating mail-accounts
• LDAP/ADS: allow to import aliases from AD or LDAP, incl. download of an .ldif file to first set them in the directory
• Preferences: fix not working password change on mobile devices
• Extended release notes

23.1.20250902

• Mail: fixed Sieve vacation notice could not be set by admin for an other user
• Calendar/REST API: fixed the locations object was not parsed
• InfoLog/REST API: return all entries the user has access to for /infolog, not just his own ones, also fix not working search
• InfoLog/REST API: do NOT add default type-filter of "task" for REST API
• REST API: fix empty/0 byte uploads through /links/ collection
• REST API: fix PUT and POST requests to /links/ collection to upload files were wrongly denied (due to their content-type)
• Filemanager: jobs to monitore directories and create InfoLog entries from files in it