1.0.19

Release instructions

Distributed App

Postgres App

Changelog

James

Added

• JAMES-4209 CassandraMessagesDAOV3: optionally write recovery infos
• JAMES-4204 WebAdmin route to restore a mailbox from a backup zip file (with a force parameter)
• JAMES-4205 Create default mailboxes after OIDC login
• Support StartTLS, SSL and Proxy protocol for LMTP
• [ENHANCEMENT] Attribute for forwarded mail

Fixes

• JAMES-4207 MANAGESIEVE: do not announce capabilities after authentication
• JAMES-4206 Don't log a stacktrace on every ManageSieve logout
• [FIX] Quota recomputation should trigger a QuotaUpdate event
• [FIX] MOVE/COPY should not exceed batch size in published events
• Implement negative ACL for JMAP

Enhancements

• JAMES-4212 Use a string-based representation for groups
• [ENHANCEMENT] Reduce WebAdmin validation boilerplate
• [ENHANCEMENT] Log stacktraces in DEBUG mode for protocol level failures

Upgrades

• [UPGRADE] ical4j 4.1.1 → 4.2.5
• [UPGRADE] commons-text 1.13.1 → 1.15.0
• [UPGRADE] commons-configuration2 2.12.0 → 2.15.0

TMail

Added

• ISSUE-2346 Unauthenticated blob access
• ISSUE-2411 WebAdmin routes to manage JMAP settings (CRUD) and a settings statistics report
• ISSUE-2374 New SuspiciousDisplayName and SuspiciousDomainInDisplayName mailet matchers (anti-phishing)
• ISSUE-2383 Support signature templates with the combined user repository

Fixes

• ISSUE-2407 Do not dispatch Label events on the notification bus
• ISSUE-2391 CalDavCollect should not log an error upon malformed organizer
• [FIX] Use the {{input}} placeholder for the remote LLM prompt
• [FIX] RedisOidcToken: correctly setReadFrom for cluster topology

Enhancements

• [ENHANCEMENT] Add a Gaussian date decay to the default search sort in order to favour recent messages (distributed, opt-in)
• [ENHANCEMENT] Configurable language for on-prem deployments
• ISSUE-2407 Logs now include the event bus name
• ISSUE-2347 Allow to configure the Redis commands timeout

1.0.18

Release instructions

Distributed App

Postgres App

Changelog

James

Added

• JAMES-4203 Identity events: events are now emitted on identity create/update/delete, enabling reactive integrations via CustomIdentityDAO
• JAMES-3893 Allow deleting identities via WebAdmin
• JAMES-4200 ActiveMQ: configuration option to adjust usage limit (activemq.usageLimit)

Fixes

• JAMES-4193 Correct BoringSSL TLS 1.3 cipher suite sanitizing that inadvertently disabled TLS 1.3
• JAMES-4182 Fix a blocking call in CassandraAttachmentMapper::loadAttachmentContent
• [FIX] Improve leak management when an error occurs during blob operations

Enhancements

• [ENHANCEMENT] LeakAware: explicit resource naming for better auditability of resource leaks
• JAMES-4182 ZstdBlobStoreDAO: new blob store implementation using Zstd compression (S3, file, Cassandra, Postgres backends)
• JAMES-4202 OpenSearch: group single UID clauses into a single term query for better performance
• JAMES-4123 Improvement for deleted message search override: handle the ALL criterion

Upgrades

• [UPGRADE] Netty 4.1.126.Final → 4.1.132.Final (CVE-2025-67735)
• [UPGRADE] ActiveMQ 6.2.4 → 6.2.5 (CVE-2026-41044, CVE-2026-41043, CVE-2026-40466)
• [UPGRADE] Spark Java 3.0.2 → 3.0.4 (CVE-2026-1605)
• [UPGRADE] MIME4J 0.8.13 → 0.8.14
• [UPGRADE] RSpamD 3.12.0 → 3.14.3
• [UPGRADE] kvrocks 2.12.1 → 2.15.0
• Bump org.postgresql:postgresql to latest

TMail

Added

• ISSUE-2325 Domain-based signature engine: webadmin routes to manage per-domain signature templates, Cassandra and Postgres repository implementations, Guice wiring, flexible IdentityProvisionListener templates, and full documentation
• ISSUE-2325 Webadmin routes to modify all signatures of domain users at once
• ISSUE-2265 IMAP extension for Identity: expose identity email address in IMAP metadata via IdentityMetadataListener; avoid provisioning inbox on identity delete
• ISSUE-2351 RestrictiveCalDavCollectIntegration: restrictive CalDAV collection integration tests
• ISSUE-1216 Webadmin: Multi-tenant friendly tasks
• ISSUE-1180 User Data Tiering via tasks
• ISSUE-2327 Leverage optional URL loading for label categorization

Fixes

• ISSUE-2331 Fix KeywordQueryView with Row-Level Security (RLS) in Postgres
• ISSUE-2377 TmailLocalDelivery mailet now supports onMailetException
• ISSUE-2350 CalendarEvent/reply: be resilient when the referenced event is missing
• [FIX] CalendarEvent/reply: warn upon cancelled events
• [FIX] CalendarEvent/parse: be lenient on malformed addresses
• [FIX] Limit amount of collected contacts and improve parallelism
• ISSUE-2322 Fix flaky shouldRemoveAllEmailsFromSearchEngineWhenCollectedContactWithMultipleEmailsIsDeleted test

Enhancements

• ISSUE-5550 Improve RabbitMQ dead lettering
• [ENHANCEMENT] Avoid collecting spam contacts
• ISSUE-1227 Add alignment validation for CalDavCollect
• Bind PopulateKeywordEmailQueryViewTask module for Postgres app

Upgrades

• Switch to JDK 25
• [UPGRADE] netty-tcnative 2.0.65.Final → 2.0.77.Final

Twake Mail backend 1.0.17

Release instructions

Distributed App

Postgres App

Changelog: Apache James

Added

• JAMES-4185 WEBADMIN Ability to browse deleted messages
• JAMES-4194 Tiering: max threading window (#2987)
• JAMES-4091 Paginate and sort connected users
• JAMES-4193 SSL management improvments (Boring SSL)
• JAMES-4201 Webadmin Auth: tokens with basic right controls

Changed

• [AUDIT TRAIL] Log message moves in JMAP
• JAMES-3498 Make NamingStrategy an interface
• JAMES-4196 Allow CRUD operation on shared folder for JMAP (#2988)
• [UPGRADE] ActiveMQ 6.2.1 -> 6.2.3 (CVE-2026-33227 + CVE-2026-34197) (#2994)
• JAMES-4199 refactor ActiveMQ browsing code for better readability
• JAMES-4200 ActiveMQ: set adjustUsageLimits to false for BrokerService to prevent the embedded broker to claim up to 70% of JVM memory that might cause memory drain of James
• JAMES-4198 Heuristic to skip attachment parsing based on message headers
• [UPGRADE] Log4J 2.24.3 -> 2.25.4 (CVE-2026-34477 CVE-2026-34479 CVE-2026-34478 CVE-2026-34480)
• [UPGRADE] ActiveMQ 6.2.3 -> 6.2.4 (CVE-2026-40046 CVE-2026-39304)
• JAMES-4200 Allow configuring ActiveMQ disk and use sain default of 10GB
• JAMES-4182 Metadata storage in BlobStoreDAO interface (#2960)
• [ENHANCEMENT] Make IMAP ReactiveThrottler more reliable under load

Fixed

• JAMES-4191 Deleted Message Vault should handle shared mailbox visibility loss
• [FIX] MailboxManager::create should not propagate lookup only
• Close BufferedReader in addProtocolLines (#2981)
• [FIX] DKIMHook: Lenient address mode (#2990)
• JAMES-4199 ensure MailQueueIterator is closed to prevent memory leaks (e.g. ActiveMQ leaking open browsers)
• [FIX] jakarta.mail.internet.ParseException: Unbalanced quoted string (#3002)
• [FIX] Prevent stackoverflow in IMAP SEARCH (#3007)
• [FIX] Async connection checks in IMAP (#3009)
• [FIX] EhloCommandHandler should handle domain label starting by numbers (#3006)
• [FIX] LDAP user listing should ignore invalid users (#3003)

Performance

• JAMES-4197 EventSerializer refactoring

Changelog: Tmail

Added

• ISSUE-2192 Route for restoring Deleted Message Vault for team mailboxes
• ISSUE-2210 Keyword email query view for postgres (#2270)
• ISSUE-2176 Team Mailbox: provision domain contact
• ISSUE-2290 Implement RabbitMQ partitioning
• ISSUE-2302 Firebase: specify collapse_key (#2313)
• ISSUE-2307 Cleanup JMAP rules for deleted folders (#2320)
• ISSUE-1180 Ability to apply tiering per user (#2318)

Changed

• ISSUE-2176 TMailWithMailingListValidRcptHandler should also handle subadressing
• JAMES-4191 Enrich MessageContentDeletionEvent with mailboxACL
• DavClient: split CalDav and CardDav
• Adopt JRE 26-jre-noble (#2319)

Fixed

• ISSUE-2192 Team mailbox aware Deleted messsage vault listener
• ISSUE-2176 Team Mailbox identity should not have sort order 0
• [FIX] Refine needs-action keyword (#2269)
• [TMail] JAMES-4191: RagDeletionListener should clean Rag document when the message is no longer referenced by the user
• [TMail] JAMES-4191: KeywordEmailQueryViewListener should clean up sharee's view upon MessageContentDeletionEvent
• [FIX] Do not collect subadressing variations
• ISSUE-2287 Fix CalendarEventCounter/accept with delegation (#2288)

1.0.16

Changelog: Apache James

Added

• ENHACEMENTS: ManageSieve capabilities (#2916)
• JAMES-4181 Webadmin: Ability to move emails between repositories (#2954)
• JAMES-4185 Ability to browse deleted message vault
• [ENHANCEMENT] Audit trail: IMAP CLOSE
• [ENHANCEMENT] Audit trail: message deletion
• JAMES-4183 AllowedUnauthenticatedSender Mail hook
• JAMES-4189 Ability to list users by domain
• JAMES-4190 Allow registering read only IMAP annotations (#2975)

Changed

• [ENHANCEMENT] Allow extending subaddressing (#2946)
• [ENHANCEMENT] MailetContainer should record loggedIn user in MDC (#2950)
• JAMES-4176 Retire email_query_view_sent_at
• Upgrade ActiveMQ & friends - CVE-2025-66168 + CVE-2026-27446 (#2961)
• JAMES-4186 [REFACTOR] EmaiQueryOptimizer interface to wrap email query view logic in JMAP EmailQueryMethod (#2963)
• JAMES-4187 Drop Cassandra EmailQueryView lookup table by enriching FlagsUpdated with internalDate
• JAMES-4189 Handle UsersRepository::listUsersOfADomainReactive without virtualHosting

Fixed

• [FIX] VacationRoutes error handling 500 instead of 500 (#2942)
• [FIX] Handle Lookup write propagation in complex sharing scenari
• [FIX] outgoingQueue => outgoing for RemoteDelivery mailet in mailetcontainer.xml examples
• [FIX] Subscribe Restored-Messages for the mailbox to be visible in IMAP (#2976)

Performance

• [PERF] Precompute ResultSet indexes on large IMAP processings (#2974)

Changelog: Tmail

Added

• Feature/llm mail classifier set label keywords (#2136)
• llm: Implement dual labeling for LLM predictions audit (#2153) (#2162)
• ISSUE-2175 WebAdmin API to manage folders within Team Mailboxes
• ISSUE-2178 Listener to handle folder subscriptions onto team mailboxes (#2182)
• ISSUE-2156 Provision Template folder for Team mailboxes (#2187)
• ISSUE-2179 Routes to manage extra senders
• ISSUE-2176 Implement Subaddressing on team mailboxes
• ISSUE-2183 Team mailbox identity auto-provisionning
• ISSUE-2116 SAAS: add promotion footer to signature of non-paying user
• ISSUE-2172 Flag projection
• ISSUE-2232 Auditability: Message locator
• ISSUE-2238 Implement (optional) webadmin route for searching in user … (#2239)
• TWP-996 Store settings for non existing users
• ISSUE-2159 Webadmin route to manage labels (#2245)
• ISSUE-2160 Read only labels (#2257)
• ISSUE-2255 IMAP extension for Labels
• ISSUE-2261 Auto provision labels (#2262)

Changed

• ISSUE-2215 Add organizationId to MDC (#2217)
• ISSUE-2116 IdentityProvisionListener: Interpolate LDAP attribute in signature text (#2223)
• [TMail] Adapt MessageContentDeletionEvent: enrich Flags
• ISSUE-2160 Labels: add a version in the capability (#2264)

Fixed

• fix(rag): removing prefix tmail_ from document id (#2164)
• [FIX] LLM classifier listener should load correctly configuration
• [FIX] outgoingQueue => outgoing for RemoteDelivery mailet in mailetcontainer(#2197)
• [FIX] MailetContainer should record loggedIn user in MDC (#2201)
• [FIX] TeamMailboxRepositoryImpl: createMailboxReliably should be fully idempotent (#2222)
• [FIX] Accept domain contact for SabreContactsConsumer (#2225)
• [SAAS] ISSUE-2214 Domain with rate limit are listed
• ISSUE-2251 Handle SaaS Account at the domain level for B2B
• ISSUE-2237 Support ITIP replies without organizers (#2246)

Update procedure

From the tmail-1.0.15 release:

Cassandra table update

1. Add the following columns to the domains table:

• activated : to allow setting up rate limits on a domain before it’s being activated
• can_upgrade : allows domain saas default canUpgrade value for users of that domain
• is_paying : allows domain saas default isPaying value for users of that domain

To add these columns, run the following CQL commands:

ALTER TABLE domains ADD activated boolean;
ALTER TABLE domains ADD can_upgrade boolean;
ALTER TABLE domains ADD is_paying boolean;

Note : existing domains prior to this addition without the activated field setup will be considered as unactivated. You need then to set manually existing domains to activated = true

2. Add the following column to the labels table:

• read_only : When set to true, a label cannot be updated or deleted by the user via JMAP (Label/set). Read-only labels can still be managed by administrators through the WebAdmin API.

To add this column, run the following CQL command:

ALTER TABLE labels ADD read_only boolean;

Note: Labels created before this migration will have NULL for this column, which is treated as false (not read-only) by the application.

Tmail deployment

• Rolling update the docker image to tmail-1.0.16.

0.15.0.2

Minor fixes:

• DkimDnsValidator: Handle multi-string DNS record (#2144)
• DownloadAll was leaking files (#2149)
• ISSUE-2146 Guice binding error when mailet CalDavCollect / CardDavCollectedContact on postgres app

Enhancements:

• Add detailed logging to SaaS domain subscription handler (#2158)

Changelog: Apache James

Added

• [ENHANCEMENT] Validate aud without introspect
• [ENHANCEMENT] Metrics and logs for FETCH local cache
• MAILBOX-401 Allow search on mailing list subject prefix
• JAMES-4166 Supports collapseThread on top of OpenSearch (#2926)
• JAMES-4166 Implement collapseThreads support for Lucene (#2935)

Changed

• JAMES-4165 Deprioritize non critical groups upon event dead letter events redelivery (#2917)
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.7 (#2920)
• JAMES-4150 Make Attachment Storage Optional for PostgreSQL Message Store #2885
• JAMES-4166 JMAP search: drop scroll search, use from/size pagination and collapse by messageId

Fixed

• [ENHANCEMENT] Plug IMAP audit trail onto the MDC

0.15.0

Changelog: Apache James

Added

• [ENHANCEMENT] Validate aud without introspect
• [ENHANCEMENT] Metrics and logs for FETCH local cache
• MAILBOX-401 Allow search on mailing list subject prefix
• JAMES-4166 Supports collapseThread on top of OpenSearch (#2926)
• JAMES-4166 Implement collapseThreads support for Lucene (#2935)

Changed

• JAMES-4165 Deprioritize non critical groups upon event dead letter events redelivery (#2917)
• Bump org.assertj:assertj-core from 3.27.3 to 3.27.7 (#2920)
• JAMES-4150 Make Attachment Storage Optional for PostgreSQL Message Store #2885
• JAMES-4166 JMAP search: drop scroll search, use from/size pagination and collapse by messageId

Fixed

• [ENHANCEMENT] Plug IMAP audit trail onto the MDC

Changelog: Tmail

Added

• Document email retrieval and label setting with JMAP (#2128)
• ISSUE-2102 Implement EventBusDisconnectorNotifier
• [label][description] Add label description

Changed

• ISSUE-2101 Split need action listener to Tmail event bus
• [AI][RAG]Basing email classification' logs on MDCStructuredLog
• ISSUE-1788 Create SaaSDomainSubscriptionHandler and SaaSSubscriptionHandler

Fixed

Update procedure

From the tmail-1.0.14 release:

Cassandra table update

Add the optional description field to the labels table to allow users to provide clear descriptions for their labels.
This enables better frontend synchronization.

To add this column, run the following CQL command:

ALTER TABLE labels ADD description text;

Tmail deployment

• Rolling update the docker image to tmail-1.0.15.

1.0.14

Tmail - v1.0.14

Project: Twake-Mail (James)
Version: 1.0.14
Community documentation: https://james.apache.org/documentation.html

Changelog: Apache James

Added

• JAMES-4157 Implement Blob/copy (#2896)
• JAMES-4158 Allow IMAP to specify per-port administrators
• JAMES-4159 EventBus configuration for execution rate and timeout
• JAMES-4164 VacationMailet: add support for replyMode
• add OAUTH2 authentication mechanism for sieve

Changed

• JAMES-4154 Refactor deletion callback for Postgres app (#2886)
• JAMES-4155 Drop now retired Derby in favor of H2 (#2875)
• [ENHANCEMENT] Explicit logs upon task publication failures
• [IMPROVEMENT] MailboxMergingTask: better reactive
• [ENHANCEMENT] Simplify RabbitMQWorkQueue: directly publish cancel requests
• JAMES-4162 Allow usage of <> sender for authenticated users (cf RFC-8098)
• JAMES-3062 Allow ignoring non-critical groups in Event dead letters healthcheck

Fixed

• Small fix for WaitDelay generator
• [FIX] CassandraEventDeadLetters should remove the group when removed the last event of the group

Changelog: Tmail

Added

• ISSUE-2047 WelcomeListener should support i18n

Changed

• Remove OpenPaasAmqpForwardAttribute and related deprecated code (#2085)
• [ENHANCEMENT] Record metrics for Scribe
• [ENHANCEMENT] FirebasePushListener should perform retries
• JAMES-4159 Adapt event bus refactorings into Twake Mail
• Adapt IMAP Admin
• [TMail] Allow ignoring AI-related groups in the EventDeadLettersHealthCheck
• ISSUE-2100 Drop email address event bus (#2106)

Fixed

• [ENHANCEMENT] FCM: avoid log-then-throw

Update procedure

From the tmail-1.0.13 release:

Tmail deployment

• Rolling update the docker image to tmail-1.0.14.

1.0.13

Changelog: Apache James

Added

• JAMES-4153 DKIMSign: signature template: allow for interpolating domain (#2861)
• JAMES-3340 Implement collapseThread in Email/query

Changed

• JAMES-3376 Allow configuring Email/query default limit
• [ENHANCEMENT] Enable configuring OpenSearch timeout (#2867)
• Adopt tika 3.2.3.0
• JAMES-4154 Refactor message content deletion (#2884)

Fixed

• [FIX] Correct Reactor error handling flow in DTM deletion callback (#2865)
• JAMES-4135 Search query string shall not be trigger on bracket alone
• JAMES-3872 JMAP Email/get: Fix Attachment read level cannot serve headers (#2868)
• JMAP: normalize charset case (#2877)

Changelog: Tmail

Added

• [IMPROVMENT] Add username in FCM related failure logs (#2019)
• ISSUE-2022 Implement AlignFromHeaderWithMailFrom
• ISSUE-2027 Implement Sampling matcher (#2028)
• ISSUE-2040 Open rag client method for chat completions call (#2046)
• ISSUE-2003 Implement LlmMailPrioritizationClassifierListener (#2054)
• ISSUE-2050 LlmMailPrioritizationClassifier: Inject username into the user prompt (#2058)
• ISSUE-2041 Simple JMAP proxy for chat completions rag call
• ISSUE-2049 LLlmMailPrioritizationClassifier: Configuration option to disable it (#2060)
• ISSUE-1788 TWPCommonSettingsMessage: added languageSettings() helper (#2063)

Changed

• improve TicketRoutes and TicketManager wiring for better reusability (#2018)
• [ENHANCEMENT] Serialize event once upon Redis dispatch (#2023)
• [ENHANCEMENT] Bind Webadmin vacation route
• ISSUE-1788 refactor: extract generic TWP settings update consumer flow for reuse (#2062)
• SAAS Domain payload: api changes
• JAMES-4154 Adapt the dedicated event bus for message content deletion

Fixed

• [FIX] Search: Exact subject when reply

Update procedure

From the tmail-1.0.12 release:

Cassandra updates

Add the following column to the email_query_view_sent_at and email_query_view_received_at tables to store the thread id for collapseThreads option:

• thread_id (UUID)

To add that column, run the following CQL commands:

ALTER TABLE [tmail_keyspace].email_query_view_sent_at ADD thread_id UUID;
ALTER TABLE [tmail_keyspace].email_query_view_received_at ADD thread_id UUID;

RabbitMQ update

On the helm chart, some changes have been made on the Rabbitmq queue taskManagerWorkQueue.

Please delete the queue before starting Tmail, who will recreate it.

Tmail deployment

• Rolling update the docker image to tmail-1.0.13.

Full Changelog: 1.0.12...1.0.13

1.0.12

Changelog: Apache James

Added

• JAMES-4153 DKIMSign: signature template: allow for interpolating domain (#2861)
• JAMES-3340 Implement collapseThread in Email/query

Changed

• JAMES-3376 Allow configuring Email/query default limit
• [ENHANCEMENT] Enable configuring OpenSearch timeout (#2867)
• Adopt tika 3.2.3.0
• JAMES-4154 Refactor message content deletion (#2884)

Fixed

• [FIX] Correct Reactor error handling flow in DTM deletion callback (#2865)
• JAMES-4135 Search query string shall not be trigger on bracket alone
• JAMES-3872 JMAP Email/get: Fix Attachment read level cannot serve headers (#2868)
• JMAP: normalize charset case (#2877)

Changelog: Tmail

Added

• [IMPROVMENT] Add username in FCM related failure logs (#2019)
• ISSUE-2022 Implement AlignFromHeaderWithMailFrom
• ISSUE-2027 Implement Sampling matcher (#2028)
• ISSUE-2040 Open rag client method for chat completions call (#2046)
• ISSUE-2003 Implement LlmMailPrioritizationClassifierListener (#2054)
• ISSUE-2050 LlmMailPrioritizationClassifier: Inject username into the user prompt (#2058)
• ISSUE-2041 Simple JMAP proxy for chat completions rag call
• ISSUE-2049 LLlmMailPrioritizationClassifier: Configuration option to disable it (#2060)
• ISSUE-1788 TWPCommonSettingsMessage: added languageSettings() helper (#2063)

Changed

• improve TicketRoutes and TicketManager wiring for better reusability (#2018)
• [ENHANCEMENT] Serialize event once upon Redis dispatch (#2023)
• [ENHANCEMENT] Bind Webadmin vacation route
• ISSUE-1788 refactor: extract generic TWP settings update consumer flow for reuse (#2062)
• SAAS Domain payload: api changes
• JAMES-4154 Adapt the dedicated event bus for message content deletion

Fixed

• [FIX] Search: Exact subject when reply

Update procedure

From the tmail-1.0.12 release:

Cassandra updates

Add the following column to the email_query_view_sent_at and email_query_view_received_at tables to store the thread id for collapseThreads option:

• thread_id (UUID)

To add that column, run the following CQL commands:

ALTER TABLE [tmail_keyspace].email_query_view_sent_at ADD thread_id UUID;
ALTER TABLE [tmail_keyspace].email_query_view_received_at ADD thread_id UUID;

RabbitMQ update

On the helm chart, some changes have been made on the Rabbitmq queue taskManagerWorkQueue.

Please delete the queue before starting Tmail, who will recreate it.

Tmail deployment

• Rolling update the docker image to tmail-1.0.13.

Full Changelog: 1.0.11.1...1.0.12

1.0.11.1

What's Changed

• ISSUE-1977 Implement DNS validation mailet for outbound emails by @guimard in #1978
• ISSUE-1952 Implement FolderFilteringAction/set create by @quantranhong1999 in #1982

Full Changelog: 1.0.11...1.0.11.1