v1.21.1 - Replies in the Reading Pane, Composer Tags & Shared Calendar Fixes

[rathlinus]

1.21.1 (2026-11-11)

1.21.1 lists your masked addresses under Settings > Security on servers that offer them, adds a Tags menu to the composer and default values for template placeholders, and has a setting to open replies in the whole reading pane again. The focus outline is off by default now. Admins can return to their own account after impersonating a user, let an unticked sign-in last until the browser closes, and run Auto-configure OAuth on Stalwart 1.0.3 and later before any client exists. Times follow the 12- or 24-hour setting everywhere, tags with Cyrillic and other non-Latin names can be saved, and a calendar made for a shared account lands in that account.

Thank you for your donations:

• You? Become a sponsor!

One-time

• @systemflair
• Anonymous
• @bultester

Monthly

• @comexos
• @Monarobase
• @Focus-On-Agency
• Anonymous
• @superspacehosting
• @naokton
• @yerTools
• @jsaathof
• @berkersal
• @NABarnes
• @felixzieger
• @pr0ton11
• @fpauser
• @proxforge
• @spss20
• @elgringoYan
• @pauladams8
• @djpriest
• @umakers
• @zplizzi
• @jeremiah
• @Theoretisch1337
• @svandive
• @HiltMundell

Changes

• Accessibility: The focus outline is off by default, since most people click into fields with the mouse and find a box round each one distracting. An outline you picked yourself stays, and so does the outline of anyone who turned on Always show focus. Windows contrast themes keep the outline unless you chose Off. To turn it on, pick a Focus outline under Settings > Accessibility or in the accessibility panel (Alt+Shift+A)

Features

• Security: Settings > Security lists your masked addresses on servers that offer them, such as Stalwart Enterprise and Inbuxa. You can create one, copy it, give it a description, turn it off so new mail to it is rejected, or delete it for good (Add native masked address management #1534, thanks @StefanSa)
• Security: The account security settings also work on Inbuxa servers (Add Inbuxa support for account security management #1522, thanks @StefanSa)
• Compose: A Tags menu next to Options tags the message you write. Replies and forwards start with the original's tags, a group account offers the group's shared tags, drafts keep them and the sent copy carries them (feat: add tags menu to email composer #1610, thanks @tobiasge)
• Compose: "Replies under the message" in Settings > Composing > Replying is on by default. Turned off, a reply or forward takes the whole reading pane like a new message, as it did before 1.21. Admins can preset or lock it (feat: let replies open in the reading pane instead of under the message #1606, thanks @dealerweb)
• Templates: A placeholder can carry a default, such as {{checkin_time:15:00}}. The fill dialog starts the field with it, selected, so typing replaces it and Tab keeps it (feat: default values for template placeholders, {{name:default}} #1609, thanks @shadow1runner)
• Mail: "Show attachments in the list" under Settings > Message list turns off the attachment chips under each row. The paperclip and the verification code chip stay (feat: option to hide attachment chips in message list #1604, thanks @tobiasge)
• Accessibility: Focus outline has an Off choice, in the settings, the accessibility panel and the admin defaults (feat: let the focus outline be turned off #1603, thanks @dealerweb)
• Calendar: Task-only lists show below the calendars in the month, week and day views, with the same tick as in Tasks, and their tasks show on the grid (feat(tasks): show task-only lists in the calendar views with their task list tick #1589, thanks @sanitz)
• Calendar: Task lists made in other CalDAV apps such as iOS, Thunderbird or DAVx5, and empty ones, are recognised as task lists (feat(calendar): detect task-only collections via CalDAV supported-calendar-component-set #1605, thanks @sanitz)
• Sign-in: With the Remember me box shown, admins can let a sign-in made with it unticked last until the browser closes instead of ending at the next reload, with "Keep unticked sign-ins until the browser closes" or BROWSER_SESSION_SIGN_IN. It needs SESSION_SECRET (Unchecked "Remember me": keep the sign-in for the browser session instead of ending it on reload #1559, thanks @ghozty)
• Admin: After impersonating a user, "Return to my account" in the notice at the top ends that session and signs you back in to your own account. Plugins with the auth:impersonation-return permission can draw that notice themselves and call api.user.returnToOwnAccount ([Feature]: Preserve and restore the initiating session after impersonation #1538, thanks @fdisamuel)
• Plugins: tasks.create and tasks.update write a task's keywords, so a plugin can mark the tasks it makes (feat(plugins): tasks.create / tasks.update write a task's keywords #1585, thanks @HOLOEYE-JZ)
• Plugins: In the desktop app, a plugin's own sign-in opens in an app window instead of the system browser, so it finishes inside the app, also under a base path (feat(plugins): a plugin's own sign-in opens in a desktop app window #1587, thanks @HOLOEYE-JZ)

Fixes

• Admin: Auto-configure OAuth works on Stalwart 1.0.3 and later before any OAuth client exists. When the webmail session can't manage clients, it asks once for a Stalwart admin sign-in with a password, app password or API key, which goes only to the configured Stalwart server and isn't stored ([Bug]: Auto-configure OAuth fails with forbidden on Stalwart ≥ 1.0.3: the webmail token never carries the full scope #1611, thanks @tvaril)
• Sign-in: Stalwart scopes listed under Extra scopes reach providers such as Pocket ID that grant them per resource, so Account security shows app passwords and API keys again after a single sign-on ([Bug]: Pocket ID: explicitly configured Stalwart scopes are stripped from the authorization request #1583, thanks @kavdau)
• Pro: Move, Delete, delete with mark as read, Undo and the archive key work on a message opened from a folder tab (fix: move messages from Pro folder tabs #1575, fix: trash messages from Pro folder tabs #1584, thanks @VasilisNtovolos)
• Folders: A rename the server refuses keeps the old name and shows the server's reason instead of reporting success, a failed role change shows the server's folders again, and a refused new folder shows the server's own words (fix: handle folder rename failures and stale completions #1601, fix: preserve folder creation refusal details #1615, thanks @VasilisNtovolos)
• Compose: Recipient suggestions from an older lookup no longer replace newer ones or reopen the list after you picked an address (fix: reject stale recipient suggestions #1596, thanks @VasilisNtovolos)
• Compose: The Undo send toast stays readable when its button labels are long, as in Russian ([Bug]: UI layout issue in Send Undo notification with Russian localization #1599, thanks @Aclz), and the focus outline goes round the whole To field instead of over the address being typed
• Times: The 12- or 24-hour setting applies to the event and task editors, contact events, missed reminders, search previews, the outbox, mail transfers and settings lists, and contact birthdays and anniversaries follow the date order setting. Time fields read times typed as 1430 or 2:30 pm, also in full-width or Arabic-Indic digits ([Bug]: #1616, thanks @madsmh)
• Tags: Tags named in Cyrillic or other non-Latin letters can be saved, changing only a tag's colour or the case of its name keeps the tag on its mail, and a tag made in a group account's tag picker joins the group's shared tags ([Bug]: A tag name in non-Latin letters cannot be saved #1613, thanks @DerFolder)
• Calendar: A calendar made while managing a shared or group account in the settings is created in that account and listed under it, the settings group shared calendars by account, and a new calendar is offered only where the account allows one (fix: creating calendar on managed / shared account #1617, thanks @chris-russell773)
• Calendar: A new calendar made for tasks is offered as a task list while it is still empty ([Bug]: Cannot create tasks in calendar that does not already have tasks #1595, thanks @madsmh), and the calendar of an account added second shows without a reload (Calendar "not available" for an account added second, until a page reload #1618, thanks @SystemFuchs)
• Calendar: The event popup stays open while its More menu is open (fix(calendar): keep event info popup open when opening its more menu #1598, thanks @tobiasge)
• Calendar: Invitations between two of the organisation's own domains on the same server no longer warn about missing authentication. The domains are the ones the External sender chip counts as internal (Invitation trust check: count externalMail.domains as internal #1593, thanks @beja19)
• Contacts: Related contacts show by name instead of an id and open from the contact ([Bug]:Contact relationships display raw UID instead of resolved contact name #1578, thanks @spysz)
• Mail: Images a sender attaches a second time, as Exchange Online does, no longer show as attachments next to the picture they repeat, and the plain-text view lists the inline images it leaves out (fix: hide attached copies of the images a message body embeds #1614, thanks @dealerweb)
• Mail: The BIMI logo shows on mail between the organisation's own domains on the same server, and the verified check mark sits right after the sender's name
• Mail: Rows in the message list keep their measured height, so the row below no longer covers their chips
• Avatars: A person gets the same initials and colour in every avatar, and Han-character names show the given name, so 王阳明 shows 阳明 (fix: show the given name in avatars for Han-character names #1581, thanks @ibayue)
• Notifications: The push notification prompts name the app in their title (fix: name the app in the push notification prompt's title #1577, thanks @alyyousuf7)
• Settings: The unified view settings show for a single account when the admin allows one of the views (fix(settings): expose unified views for single accounts #1594, thanks @StefanSa). The settings page no longer scrolls the window past the app, and Mountain View's settings search leaves out rows that layout doesn't show
• Admin: Admin pages keep their scroll position after saving or uploading
• Desktop: Questions in the Windows app's windows are no longer blank white cards (fix(desktop): read each dialog colour on an element of its own #1588, thanks @HOLOEYE-JZ), and the logo in the rail stays clear of the macOS window buttons
• Plugins: An inline slot's frame no longer shows scrollbars at fractional display scaling such as 125 % (fix(plugins): no scrollbars in an inline slot's frame #1602, thanks @HOLOEYE-JZ)

---

This discussion was created from the release v1.21.1 - Replies in the Reading Pane, Composer Tags & Shared Calendar Fixes.