v5.0.1

5.0.1 (2026-10-08)

Bug Fixes

• AUTHENTICATE checks the connection state before the mechanism (0747678)
• CLI startup errors and port, event streams end on graceful shutdown (d1e4d1f)
• CREATE-SPECIAL-USE answers BAD for USE entries that are not use-attr (1d7d7e7)
• deprecate the ignored xoauth2.sessionTimeout user option (953e965)
• end UID SEARCH with OK [EXPUNGEISSUED] when it holds back an EXPUNGE (ed82da8)
• ENVELOPE sends an obsolete source route as addr-adl (6363543)
• LIST patterns match full names with a prefixed personal namespace (371f99a)
• LIST treats # as a break out character that overrides the reference (99d50c2)
• METADATA and METADATA-SERVER load ENABLE (e25c9a8)
• refuse quirk presets that remove a plugin IMAP4rev2 requires (a8b13c1)
• refuse storage internal dates that are not RFC 3501 date-time values (04babcd)
• report new messages and flag changes before FETCH, STORE and SEARCH responses (41c6856)
• send RECENT after the EXISTS of new messages to IMAP4rev1 sessions (172d6be)
• STORE accepts exactly the flags PERMANENTFLAGS lists (d48a48d)

v5.0.0

5.0.0 (2026-10-08)

⚠ BREAKING CHANGES

• the XTOYBIRD plugin is removed, use the control API (README "Migrating from 4.x"). smtp-server is an optional peer dependency now, install it for --smtpPort or the new smtp option.

Features

• chance script rule option and scriptSeed, now option for repeatable tests (c04303a)
• chunkDelay 0 or 'tick' splits output on the wire without a delay (#89) (c04303a)
• control API, REST API and quirk presets, XTOYBIRD removed (c04303a)
• plugin operations for ACL, QUOTA, METADATA, SPECIAL-USE and OBJECTID (c04303a)
• quiet script event for unsolicited output between commands and during IDLE (#88) (c04303a)
• quirk presets (quirks option, --quirk) for Apache James, Yahoo and Microsoft 365 behavior (#87) (c04303a)
• session, command and waiting events, server.start() and server.stop() (c04303a)
• the storage option is validated, the JSON Schema is exported as storageSchema (c04303a)

Bug Fixes

• ACL and annotations are dropped and inherited on DELETE, CREATE and RENAME of the control API too (c04303a)

v4.3.1

4.3.1 (2026-10-08)

Bug Fixes

• script rule close: 'reset' threw ERR_INVALID_HANDLE_TYPE on TLS connections (c2e50d6)
• script rule close: 'reset' threw ERR_INVALID_HANDLE_TYPE on TLS connections (89fb431), closes #84

v4.3.0

4.3.0 (2026-10-08)

Features

• literals and defer actions for script rules (c43b957)
• literals and defer actions for script rules (c26ddce), closes #78 #79

Bug Fixes

• script rule close: 'reset' could lose the RST after the last output (f38c1c7)
• script rule close: 'reset' could lose the RST after the last output (6b93d9b), closes #81

v4.2.0

4.2.0 (2026-10-07)

Features

• script rules that make the server misbehave on purpose (ae2c167)
• script rules that make the server misbehave on purpose (43edc38)

v4.1.1

4.1.1 (2026-10-07)

Bug Fixes

• parse address groups without a display name (9cc4aa4)
• parse address groups without a display name (bc7a42b)

v4.1.0

4.1.0 (2026-10-07)

Features

• migrate to TypeScript with ES module and CommonJS builds (04552ba)
• migrate to TypeScript with ES module and CommonJS builds (b76037e)

v4.0.3

4.0.3 (2026-10-07)

Bug Fixes

• drop the doubled space in the 'Invalid FETCH argument' error text (3c896b5)
• drop the doubled space in the 'Invalid FETCH argument' error text (9ef4539), closes #67

v4.0.2

4.0.2 (2026-10-07)

Bug Fixes

• decode RFC 2047 encoded words in SEARCH header keys (6891920)
• decode RFC 2047 encoded words in SEARCH header keys (132707c), closes #65

v4.0.1

4.0.1 (2026-10-07)

Bug Fixes

• correct typos in the --help output (b108887)
• correct typos in the --help output (7a2e1db)