v6.2.0

v6.2.0 has important security fixes in addition to several improvements and general bug fixes.

As always, take a backup of your Postgres database before upgrading.

Security

This version has fixes for multiple campaign/list permission validation issues in multi-user environments.

What's new

• Embed inline images (CID) in e-mails.
• Define trusted URLs and redirect to them after subscriber form submission.
• SMTP-server selection based on 'from e-mail' domains.
• Template expression support in campaign custom headers.
• "Outlook compatbility mode" option in the Visual e-mail builder UI.
• Support for Azure bounce webhooks.

How to upgrade

As always, take a backup of your database before upgrading.

Binary

Download the latest binary. Stop and replace the old binary. Run ./listmonk --upgrade. Start the app again.

Docker

# cd /directory/with/docker-compose.yml

docker-compose down
docker-compose pull && docker-compose run --rm app ./listmonk --upgrade
docker-compose up -d app db

What's Changed

• feat(i18n): add Arabic (ar) translation by @imohad in #2977

• Bump golang.org/x/image from 0.29.0 to 0.38.0 by @dependabot[bot] in #2979
• Update Lettermint webhook documentation link by @Bjornftw in #2984
• Fix september traduction by @jiimmyy1 in #3000
• Add quick settings for azure smtp by @oskari in #3002
• Bump axios from 1.13.5 to 1.15.0 in /frontend by @dependabot[bot] in #2999
• Bump vite from 5.4.20 to 6.4.2 in /frontend/email-builder by @dependabot[bot] in #2995
• Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.4 by @dependabot[bot] in #2985
• Bump lodash from 4.17.23 to 4.18.1 in /frontend by @dependabot[bot] in #2986
• Fix container spanish translation typo by @Ggpsv in #3005
• Fix issues in spanish translations by @Ggpsv in #3007
• Bump follow-redirects from 1.15.11 to 1.16.0 in /frontend by @dependabot[bot] in #3003
• Bump postcss from 8.4.49 to 8.5.12 in /frontend by @dependabot[bot] in #3020
• Fixs #2987 - Prevent confirmed subscriber becoming unconfirmed when re-subscribing. by @blu3id in #2996
• Bump axios from 1.15.0 to 1.15.2 in /frontend by @dependabot[bot] in #3032
• Bump systeminformation from 5.31.1 to 5.31.6 in /frontend by @dependabot[bot] in #3046
• Update campaign translations to 营销活动 and change field name to 名称 by @egghurt in #3038
• Bump postcss from 8.5.9 to 8.5.14 in /frontend/email-builder by @dependabot[bot] in #3036
• fix(analytics): correct per-campaign unique view counting by @wucm667 in #3024
• fix: prevent nil pointer crash in BounceWebhook when bounce processing disabled by @Koushik-1729 in #2993
• Add LumaDock as a hosting option by @AXR9 in #3062
• Bump qs from 6.14.2 to 6.15.2 in /frontend by @dependabot[bot] in #3061
• Bump js-cookie from 3.0.5 to 3.0.7 in /frontend by @dependabot[bot] in #3059
• Updated German translation for new refresh button by @althaus in #3060
• Update nl.json by @RichardJong in #3052
• fix: italian localization is now more natural by @cmargiotta in #3048
• Add per-domain SMTP routing by @jaymzh in #2953
• Fix: ZIP Slip path traversal in CSV import by @Yunkaiwjs in #3065
• Bump tmp from 0.2.5 to 0.2.7 in /frontend by @dependabot[bot] in #3064
• Bump axios from 1.15.2 to 1.16.0 in /frontend by @dependabot[bot] in #3066
• fix: protect SES cert cache map with sync.RWMutex to prevent concurrent map writes crash by @Abzaek in #3050
• Add Indonesian translations (i18n/id.json) by @reynaldiarya in #3069
• Update subscription confirmation message in Spanish by @altomarketing in #3070
• Fix typo in es.json: "inválido" → "individual" by @al10101 in #3072
• Fix dev environment when $GOPATH is not set by @dfabulich in #3097
• Added API endpoint for SQL based list changes by @NWTrident in #3093
• Support robots.txt in static content by @dfabulich in #3096
• Show the "Links" chart heading on the campaign analytics page by @sysrow in #3091
• Add Azure ACS bounce webhooks and settings support by @oskari in #3001
• Outlook-safe rendering for visual email builder output by @MrJoky in #2978
• Add support for embedding images (inline attachments) via CID in campaign bodies by @knadh in #3034
• Update Italian translation by @albanobattistella in #3109
• Fix api tokens hashing by @knadh in #3114

New Contributors

• @imohad made their first contribution in #2977
• @jiimmyy1 made their first contribution in #3000
• @oskari made their first contribution in #3002
• @Ggpsv made their first contribution in #3005
• @blu3id made their first contribution in #2996
• @egghurt made their first contribution in #3038
• @wucm667 made their first contribution in #3024
• @Koushik-1729 made their first contribution in #2993
• @AXR9 made their first contribution in #3062
• @althaus made their first contribution in #3060
• @RichardJong made their first contribution in #3052
• @cmargiotta made their first contribution in #3048
• @jaymzh made their first contribution in #2953
• @Yunkaiwjs made their first contribution in #3065
• @Abzaek made their first contribution in #3050
• @reynaldiarya made their first contribution in #3069
• @altomarketing made their first contribution in #3070
• @al10101 made their first contribution in #3072
• @dfabulich made their first contribution in #3097
• @NWTrident made their first contribution in #3093
• @MrJoky made their first contribution in #2978

Full Changelog: v6.1.0...v6.2.0