v2.3.8

Bug Fixes

• storage: Persist per-message GUID so EMAILID is real
• storage: Backfill GUIDs for mail stored before the extension existed

Documentation

• install: Cover Docker Compose and Kubernetes install paths
• install: Drop A./B. prefixes from comparison table links

Tests

• storage: Guard EMAILID uniqueness and stability

v2.3.7

Bug Fixes

• docker: Use numeric USER 1000:1000 (hadolint DL3066)

Chores

• deps: Bump modernc.org/sqlite from 1.54.0 to 1.55.0
• deps: Bump docker/login-action from 4.5.1 to 4.6.0
• deps: Bump hadolint/hadolint-action from 3.3.0 to 3.4.0
• Move module path to github.com/yarilomail/yarilo

v2.3.6

Bug Fixes

• gitleaks: Global allowlists as top-level [[allowlists]]

Chores

• Restyle code comments toward terse, factual style (checkpoint, partial)
• Restyle comments in mdbox / mailindex / fts / pkg-mailbox / pkg-dict-locks-auth (checkpoint 2)
• Restyle comments in yarctl / auth / director / backendapi / maildir / acl-locks (checkpoint 3)
• Restyle comments in imap/server, warden/login/submission, auth, fts-decoder & pkg (checkpoint 4)
• Restyle comments in telemetry / mdbox / pkg / sieve / yarctl-migrate (checkpoint 5)
• helm: Bump appVersion to 2.3.6 (comment-restyle sweep; new image for sandbox verification)
• Restyle comments in the last narrative files (reserved/fts-main/yarctl-http/flags)

v2.3.5

Bug Fixes

• helm: Key yarctl backend mTLS on the global internal-TLS flag (#954)

v2.3.4

Refactoring

• Rename the connection-accounting service yarilo-anvil → yarilo-warden

v2.3.3

Bug Fixes

• yarctl: Route anvil in the backend plane so anvil dump works in-container (#953)
• yarctl: MTLS client for backend-api/director admin hops (#954)

v2.3.1

Chores

• helm: Bump appVersion to 2.3.1 (anvil dump + size units)
• docs: Move internal design notes out of git; de-reference them in code
• docs: Move OBOX.md to docs_internal; drop upstream ref in a config comment
• docs: Move TODO.md internal; scrub remaining upstream refs & dead links

Documentation

• Neutralize incidental upstream-product references
• pop3: Fix stale session-lock filename (dovecot- → yarilo-pop3-session.lock)
• helm: Drop upstream config-file name from username_hash comment

Features

• config: Human-readable units for the remaining byte-size fields
• anvil: Yarctl anvil dump — admin state introspection

v2.3.0

Bug Fixes

• auth: Stop wrong-password storms from locking a user out (#950)

Features

• anvil: Lift the single-replica limit — scale-out on Redis (#908 PR4)

v2.2.56

Features

• anvil: Move kick bus into StateBackend with Redis Pub/Sub (#908 PR3)

v2.2.55

Bug Fixes

• auth: Pool the penalty anvil client so it survives an anvil restart (#946)

Chores

• sandbox: Re-enable auth penalty now that #942 is fixed