You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
rename Mailbroom to Inboxrake (#204)
Mailbroom is now Inboxrake, because another email app already uses the old name.
Upgrading: in your compose file, change the image to ghcr.io/mclgoerg/inboxrake:latest; the old image gets no more updates. Keep your volume, .env and the rest of the compose file as they are. The old MAILBROOM_* settings still work, and the log tells you which ones to rename to INBOXRAKE_*. MAILBROOM_BIND/MAILBROOM_PORT belong to your compose file's ports: line - rename them only together with it.
If you turned on the local mail-text index, Settings shows it as built with a different key after the upgrade - your key is fine, click Rebuild once.
Features
browser demo shell (#223) (6509cf3)
Inboxrake now has a try-it-in-your-browser demo. It runs entirely in your browser tab with invented mailboxes: no account, no mailbox, nothing leaves your browser.
demo-mode gating in the UI (#218) (1fe38d5)
Inboxrake can now run as the public in-browser demo: controls that need a network (adding accounts, AI, OAuth sign-in, digests, connection tests) are shown greyed out with a "Not available in the demo" note. Normal installs are unchanged.
possible duplicates - the same mail sent twice within minutes (#251) (a669a2a)
The Duplicates panel now also lists possible duplicates: the same sender and subject sent twice within ten minutes (different Message-IDs). Nothing there is selected for you - open the mails, compare, and tick what to trash.
a failed connection test no longer counts as finished setup (#235) (111c1d6)
If the connection test fails during setup, the home screen now says the account still needs setting up and offers to continue, instead of inviting a scan that hangs. Existing accounts are unaffected.
a fresh install points to setup instead of Scan (#249) (e803926)
On a fresh install the main button now says "Set up your mailbox" and opens the setup wizard, instead of offering a Scan that could only fail.
a rescan no longer forgets attachment sizes (#252) (fa09a11)
Rescanning (including after "Not junk" or Undo) no longer resets attachment sizes, so the attachment-based quick wins stay.
block rules can't be widened by a crafted sender address (#240) (639e4da)
Blocking a sender or domain now refuses unusual addresses instead of creating a rule that could match a different sender.
demo unsubscribe explains instead of opening a dead page (#228) (bec8a1d)
The website demo no longer opens a dead page on Unsubscribe; it explains what happens in a real install.
duplicates are only mails that really are the same (#248) (de60446)
The duplicate finder now only lists mails that really are the same: the same Message-ID, in any folder. Two different mails from the same sender with the same subject and size (say, monthly statements) are no longer treated as duplicates, so "Select all but newest" can't pick the older one.
Mails without a usable Message-ID (missing, or junk such as <> / @ / -, or cut off) are still matched by identical sender + subject + size, but only with each other.
editing an armed rule sends it back to report mode (#233) (a9d2d57)
Editing a rule's filter, action, target folder, retention or account now sends it back to report mode. It needs one report run of the new definition before it acts again.
Renaming a rule, changing its schedule or enabling/disabling it does not reset it.
Existing armed rules keep running as they are until their next edit.
keep the undo entry when an Undo fails (#220) (b52cea8)
A failed Undo (server unreachable, Trash cannot be opened, connection dropped halfway) no longer throws the undo entry away: it stays in the list, in the same place, and you can retry. Mails that were already restored are not restored twice.
The server now refuses oversized requests (HTTP 413) instead of reading them into memory. A settings backup up to 64 MiB can still be imported.
login throttle holds under parallel attempts (#229) (6cf1a88)
Login throttling now also holds against parallel attempts: the 6th attempt within 15 minutes is refused even when many arrive at once.
IPv6 clients are counted per /64 network.
Behind a reverse proxy, set FORWARDED_ALLOW_IPS to the proxy's address (never *) so attempts are counted per visitor; without it, 5 wrong passwords from anyone lock everyone out for 15 minutes.
new rules no longer say they were reset (#238) (fc84b8e)
A newly created rule (including Block rules and imported rules) no longer shows "Back in report mode: what the rule acts on was changed".
Outlook device sign-in no longer sends tokens to the browser (#230) (5e9f69e)
Outlook device-code sign-in no longer sends the access and refresh tokens to the browser; they stay on the server, where they were already saved.
Outlook setup no longer calls an optional secret required (#236) (3ca9ff4)
The Outlook / Microsoft 365 setup no longer marks the client secret as required; a public client doesn't need one.
purge rules wait until mail has been in Trash or Junk for N days (#234) (a9cd0d6)
Purge rules (Trash/Junk) now delete a mail only once it has been in that folder for more than N days, counted from when Inboxrake first saw it there - a mail you trash by mistake today is no longer deleted on the next run just because it is old.
The received-date condition still applies on top.
Upgrade note: Inboxrake has no "first seen" time for mail already in Trash/Junk, so after upgrading armed purge rules delete nothing for their first N days. Manual purges in the Folders panel are unchanged.
rules refuse a qualifier given twice (#242) (6004e58)
A rule filter that names the same qualifier twice (for example two age: parts) is now refused when saved; before, only the last one counted and the rule could match more mail than intended. Existing rules like that are flagged and don't execute until edited.
rules refuse filters with mistyped parts (#237) (fb0c09e)
Saving a rule (create or edit) whose filter has a part Inboxrake doesn't understand is refused, with an error naming the part. The editor shows it next to the filter field.
Rules saved earlier with such a filter stay saved and show a warning on their card; their execute runs are skipped until you edit the filter. Report runs still work.
the connection test gives up quickly and can be cancelled (#246) (fd27d13)
Testing a mail connection now gives up after 15 seconds instead of spinning for minutes, and can be cancelled (button, X or Esc).
Connection errors say what is wrong: host not found, port closed, no answer, wrong security setting for the port (try STARTTLS on 143 / SSL/TLS on 993), not an IMAP server, or an untrusted certificate.
the setup card names the mailbox, not its internal id (#241) (b422707)
The "Finish setting up" card now names your mailbox address instead of the internal account name (for example "default").
undo copes with unusual Message-IDs (#232) (c9362a1)
Undo no longer fails, or restores the wrong mails, when a mail's Message-ID contains quotes or other unusual characters.
undo shows its result where you are (#247) (1fa2051)
Undo now confirms in a toast where you are ("Restored 120 mails (ACME Store)", or how many came back if only some did) instead of a notice above the list that was often out of view.
The page no longer jumps to the top of the list after you confirm an Undo.
