v1.30.0

1.30.0 (2026-10-19)

Features

• dav: support RFC 5995 add-member on calendars and address books (374634b)

v1.29.0

1.29.0 (2026-10-19)

Features

• caldav: store VTODO and VJOURNAL objects (e52a6ec)

v1.28.0

1.28.0 (2026-10-19)

Features

• carddav: index more vCard properties for addressbook-query (c562a2d)

v1.27.0

1.27.0 (2026-10-17)

Features

• add a production Docker Compose overlay with Caddy (M12) (76ca49f)
• add structured logging and a metrics endpoint (M12) (9c1f6fa)
• add the backup runbook and an automated restore test (M12) (94aa067)
• server: add the /healthz endpoint (M12) (128ecba)
• server: apply pending migrations at startup (M12) (8b1bad1)
• server: rate-limit failed logins and add security headers (M12) (55061a5)

v1.26.0

1.26.0 (2026-10-17)

Bug Fixes

• answer malformed PROPFIND, PROPPATCH and MKCOL bodies with 400 (d8bdb4e)
• core: export ParsedVCardProperty (d745a0e)
• server: accept a trailing slash in DAV URLs (fb2d21b)
• server: make locking conform to RFC 4918, as found by litmus (M11) (93b379f)

Features

• admin-api: include the principalId in the user representation (19f9bc2)
• core: add the getctag live property (M11) (7583ea2)
• core: harden the vCard parser for vCard 3.0 clients (M11) (a6f6728)
• server: add current-user-principal discovery and a tenant-root PROPFIND (M11) (0a70bd6)
• server: add DAV:supported-report-set and DAV:sync-token (M11) (200c29d)
• server: add OPTIONS with DAV and MS-Author-Via headers (M11) (9810ddf)
• server: add RFC 6764 well-known discovery (M11) (9c5d14e)
• server: allow deleting calendars and addressbooks (M11) (acfceb4)

v1.25.0

1.25.0 (2026-10-16)

Bug Fixes

• core: export UpdateTenantInput (0aa56cd)

Features

• admin-api: add OAuth2 identity linking endpoints (M10) (e7bddcd)
• admin-api: add the admin password reset endpoint (M10) (e54c9a5)
• core: add Digest and OAuth2 columns to credentials (M10) (51c0e15)
• core: add the Digest auth provider and nonce store (M10) (54d6eaa)
• core: add the OAuth2 resource-server auth provider (M10) (1c9d766)
• core: cap the number of remembered Digest nonces (M10) (b9258b7)
• core: maintain digest credentials and add setUserPassword (M10) (ed84b06)
• server: add Digest auth challenge and validation middleware (M10) (c9f1885)
• server: add the OAuth2 bearer middleware (M10) (aa2e871)
• server: make the active auth providers configurable (M10) (0d4b771)

v1.24.0

1.24.0 (2026-10-16)

Bug Fixes

• core: list sync-collection members in a deterministic order (e0746ed)

Features

• admin-api: add tenant create, list, show and update endpoints (M9) (974ba9c)
• admin-api: add the group management endpoints (M9) (f6f3358)
• admin-api: add the quota management endpoints (M9) (0112ddc)
• admin-api: add the tenant deletion endpoint (M9) (426387e)
• admin-api: add the user management endpoints (M9) (98ab87c)
• core: add TenantService.deleteTenant (M9) (9acd74e)
• core: add user listing, update and deletion to UserService (M9) (e4dd855)
• core: cascade tenant deletes through every foreign key (M9) (2aa9b27)
• core: extend the group services for the Admin API (M9) (8a06c8a)

v1.23.0

1.23.0 (2026-10-06)

Features

• admin-api: add the Admin API router scaffold and role authorization (M9) (c5625f6)
• core: add the Admin API role hierarchy check (M9) (f9a3f0b)
• server: add quota reconciliation job and manual trigger (M8) (1466c50)
• server: add RFC 4331 quota live properties (M8) (d8ddd30)
• server: retrofit CardDAV/CalDAV writes with quota enforcement (M8) (eef34c4)

v1.22.0

1.22.0 (2026-10-06)

Features

• server: retrofit WebDAV PUT/DELETE/COPY with quota enforcement (M8) (e0ba543)

v1.21.0

1.21.0 (2026-09-25)

Features

• core: add the race-free quota counter utility (M8) (20076ff)
• server: add scheduling privileges and Inbox/Outbox routes (M7) (d21e5ca)
• server: add the scheduling Outbox freebusy-request handler (M7) (d3159f9)