Get ready for a brand-new experience in American Truck Simulator! It's time to grab a different set of keys and hit the road in amazing vehicles that are a little different than what you've been used to. We're excited to announce that the
We are so excited to be almost finished with this upcoming DLC and that our #BestCommunityEver will be able to enjoy it too! To get you in the mood for driving the stunning cars from Ford, our talented video team has put together an official video trailer. Watch it below to see all that is coming!
Road Trip will bring a whole new experience for players of American Truck Simulator. Not only will you be able to drive in completely different types of vehicles than before, but you will also have the opportunity to complete smaller delivery jobs, customize your cars with accessories, paint them in different colors, or explore the vast landscapes of the U.S. from a completely new perspective while also discovering and learning about beautiful landmarks with the new Atlas feature!
Just imagine driving legendary cars like theΒ 1967 Ford Mustang Fastback,Β 2023 Ford F-150,Β 2023 Ford Bronco, andΒ 1998β2012 Ford Crown Victoria on Route 66 from Chicago to Los Angeles, through the rolling hills of the Midwest, or over the beautiful mountains in Montana from the comfort of your home.
And if you are a pure truck driver and don't feel like ever leaving your decked-out rig, don't forget that the Atlas feature available with Road Trip DLCs is not just for cars.Β You can still enjoy the feature behind the wheel of an 18-wheeler - just make sure to own the Road Trip: Ford DLC so this feature is unlocked for you right after its release.Β
require browser POST requests to have an allowed origin (#6238) Browsers can send POST requests without performing any preflight request and without checking whether the request origin is present in Access-Control-Allow-Origin. Intercept these requests and check server-side whether the origin is allowed, blocking the request if it is not.
conf: fix comparison and sharing of the default authInternalUsers (#6205)
pmp4, fmp4: restore check on inbound H265 SPS (bluenviron/mediacommon#374) A valid H265 SPS is required for marshaling back an MP4, so we have to resume checking them.
pmp4: support tracks without edts (bluenviron/mediacommon#375) The edit box is optional (ISO/IEC 14496-12, 8.6.5), but tracks without it were rejected with "unexpected box 'mdia'".
pmp4: return seek errors from GetPayload (bluenviron/mediacommon#376) GetPayload checked the wrong variable after seeking, therefore a failed seek was ignored and the payload was read from the current position of the reader.
pmp4, fmp4: correctly fill HvcC NumTemporalLayers / TemporalIdNested from SPS (bluenviron/mediacommon#379)
rtpmjpeg: reject reserved quantization value 127 (bluenviron/gortsplib#1161) RFC 2435 reserves quantization values 100-127, but the guard used Quantization < 127
make the server manage sessions (#6239) Sessions are now managed by the HLS server, detaching their lifecycle from muxers. This also comes with a performance improvement, since finding a session now traverses a single mutex, and not two channels like before.
return 404 when a session is valid but muxer is closed (#5736) (#6240) HLS sessions are now kept open for up to 30 seconds after a muxer is closed. This allows the server to handle incoming requests belonging to these sessions and to classify then as 404 rather than 401.
change error returned in case session is not found (#6241) match the RTSP behavior and return a "session not found" message rather than an "authentication error", which is reserved for creating sessions, not for using them.
fix AV1 getting stuck by stripping padding (#5632) (#5774) (#6242) AV1 OBU padding is generated by several encoders. Stripping it has been demonstrated to solve most situations in which browsers get stuck when playing such streams.
fix stuck decoding with DJI drones (#5221) (#6051) (#6243) Streams from DJI drones contain SEI units with payload type 5 and a specific UUID that seem to cause stuck videos on Chrome and Firefox. Filter out these units.
code.cloudfoundry.org/bytefmt updated from v0.88.0 to v0.90.0
github.com/MicahParks/keyfunc/v3 updated from v3.8.1 to v3.8.2
github.com/abema/go-mp4 updated from v1.7.1 to v1.7.3
github.com/bluenviron/gohlslib/v2 updated from v2.4.4 to v2.4.5
github.com/bluenviron/gortmplib updated from v1.0.2 to v1.0.3
github.com/bluenviron/gortsplib/v5 updated from v5.6.5 to v5.6.6
github.com/bluenviron/mediacommon/v2 updated from v2.9.4 to v2.9.5
github.com/gin-contrib/pprof updated from v1.5.4 to v1.5.5
github.com/matthewhartstonge/argon2 updated from v1.5.7 to v1.6.3
github.com/pion/ice/v4 updated from v4.4.1 to v4.4.2
github.com/pion/interceptor updated from v0.1.47 to v0.1.48
github.com/pion/sdp/v3 updated from v3.0.19 to v3.0.20
github.com/pion/transport/v4 updated from v4.1.0 to v4.1.1
github.com/pion/webrtc/v4 updated from v4.2.19 to v4.2.20
golang.org/x/crypto updated from v0.55.0 to v0.57.0
golang.org/x/net updated from v0.58.0 to v0.59.0
golang.org/x/sync updated from v0.22.0 to v0.23.0
golang.org/x/sys updated from v0.47.0 to v0.48.0
golang.org/x/term updated from v0.45.0 to v0.46.0
github.com/bytedance/gopkg updated from v0.1.3 to v0.1.4
github.com/bytedance/sonic updated from v1.15.0 to v1.15.2
github.com/bytedance/sonic/loader updated from v0.5.0 to v0.5.1
github.com/cloudwego/base64x updated from v0.1.6 to v0.1.7
github.com/gabriel-vasile/mimetype updated from v1.4.12 to v1.4.13
github.com/gin-contrib/sse updated from v1.1.0 to v1.1.1
github.com/go-playground/validator/v10 updated from v10.30.1 to v10.30.3
github.com/goccy/go-json updated from v0.10.5 to v0.10.6
github.com/klauspost/cpuid/v2 updated from v2.3.0 to v2.4.0
github.com/mattn/go-isatty updated from v0.0.20 to v0.0.23
github.com/pelletier/go-toml/v2 updated from v2.2.4 to v2.4.3
github.com/pion/dtls/v3 updated from v3.1.5 to v3.1.8
github.com/pion/mdns/v2 updated from v2.1.0 to v2.2.0
github.com/pion/srtp/v3 updated from v3.0.13 to v3.0.15
github.com/pion/stun/v3 removed
github.com/pion/turn/v5 updated from v5.0.13 to v5.1.0
go.mongodb.org/mongo-driver/v2 updated from v2.5.0 to v2.8.0
golang.org/x/arch updated from v0.22.0 to v0.29.0
golang.org/x/text updated from v0.41.0 to v0.42.0
google.golang.org/protobuf updated from v1.36.10 to v1.36.11
github.com/pion/stun/v4 v4.0.0 added
hls.js updated from v1.7.2 to v1.7.3
Security
Binaries are compiled from source code by the Release workflow, which is a fully-visible process that prevents any change or external interference in produced artifacts.
Checksums of binaries are also published in a public blockchain by using GitHub Attestations, and they can be verified by running:
ls mediamtx_* | xargs -L1 gh attestation verify --repo bluenviron/mediamtx
You can verify checksums of binaries by downloading checksums.sha256 and running:
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. Clonezilla Live is a Debian-based live distribution containing Clonezilla, a partition and disk cloning software. The project's latest release, version 3.3.3-37, includes several updates from its parent, along with new boot options: "The underlying GNU/Linux operating system has been upgraded, this release is based on the Debian 'Sid'....
With the release of our South Dakota DLC, we invite you all to join us on Thursday, the 24th of September, for the newest World of Trucks event - Cruising South Dakota! Roll through the Mount Rushmore State and take in its wide-open landscapes, natural beauty and rich history.
So, what is the challenge? Haul cargo to or from any city in South Dakota and help the community reach a collective goal of 150,000,000 miles (241,402,000 km). With the strength of our #BestCommunityEver, we know you will smash it!Β
Hit the road by #CruisingSouthDakota, where vast prairies meet the rugged Black Hills and the otherworldly Badlands, with long crossings over the Missouri River along the way. But this land carries far more than scenery, it holds stories that reach deep into the past. The Black Hills, known to the Lakota people as Paha Sapa, are sacred ground, while Badlands National Park preserves one of the richest fossil beds on Earth. This is where giants like SUE the T. rex slept for millions of years before being discovered.
During your travels, you can look forward to many spectacular views and highlights, such as:
Mount Rushmore National Memorial, the iconic monument carved into a granite face in the Black Hills.
Badlands National Park, a dramatic maze of layered rock spires and buttes unlike anywhere else in America.
Deadwood, the legendary gold rush town where Wild Bill Hickok played his final hand.
Missouri River crossings, where the great river divides the rolling east from the rugged west of the state.
As with past Cruising events, you can also participate using your own trailer by selecting jobs from the External Market!
The South Dakota DLC features 13 incredible cities to explore, and we're offering an exclusive reward for completing your personal goal, which will require you to deliver a job to or from all of them. All jobs for the event must be at least 100 miles (161 km) long.
Take part in this breathtaking journey across the Great Plains, from South Dakota's sweeping landscapes and Black Hills to its frontier towns. Let's roll through the Mount Rushmore State!
Rules
Using External Contracts or External Market, with a World of Trucks-connected profile in American Truck Simulator, the community goal is to drive 150,000,000 miles (241,402,000 km) while delivering cargoes to or from any city in South Dakota.
When a player has completed deliveries to or from all 13 South Dakota cities, they will achieve their personal goal.
All jobs for the event must be at least 100 miles (161 km) long.
You can check if your recent deliveries met these conditions using your Log Book in your World of Trucks profile.
Rewards
Personal: Players who complete deliveries to or from all 13 South Dakota cities will earn a personal World of Trucks Achievement and a Call of the Badlands ATS truck paint job Steam inventory item.
Community: When the community goal of driving 150,000,000 miles (241,402,000 km) during deliveries to or from any city in South Dakota is met, players who have also achieved their personal goal will receive a Ring-necked Pheasant Steam inventory item.
Note: In order to qualify for the community reward, you must complete your personal goal in American Truck Simulator. Each reward will be a Steam inventory item for American Truck Simulator. Once completed, claim your rewards on the Events page of your World of Trucks profile.
The event will conclude on Sunday, the 22nd of November at 23:59 UTC.
Gear up for the latest addition to American Truck Simulator and join us for #CruisingSouthDakota! Share your screenshots and videos with us on our Facebook, X (formerly Twitter), and Instagram profiles, and we will share our favourite ones (we may even feature some of them in a future blog post!).
Pre-release. This is a test build for Bulwark Lite. Not recommended for production. The latest Docker tag stays on 1.10.0. To try the server build, use ghcr.io/bulwarkmail/webmail:1.11.0-beta.1.
Bulwark Lite
Bulwark Lite is a static build of the webmail. It has no Node server: the browser talks to your JMAP server directly.
bulwark-lite-1.11.0-beta.1.zip: unpack it on any static web host (nginx, Caddy, S3, Pagesβ¦). Set your JMAP server in config.json. The JMAP server must allow CORS from the webmail origin.
bulwark-lite-stalwart.zip: a Stalwart Application bundle. Install it as an Application in Stalwart and it serves itself under the configured prefix (e.g. /webmail).
The Lite zips are attached once the Build Static Lite workflow finishes (a few minutes after publishing).
Please report problems with the Lite build in the issue tracker.
Also in this pre-release
New "Flat fields" theme
Icon set migrated from Lucide to Tabler Icons
Hardened Lite login, deep-link replay and settings gating
In June, we announced that we are working on the Indiana DLC for American Truck Simulator. While our map teams are busy bringing the Hoosier State to life, they first had to experience it for themselves. Let's take a look back at their research trip to Indiana!
The team that set out for Indiana consisted of the map DLC lead Dubak, our map designers LukΓ‘Ε‘ and Martin, and our researcher Spekin. Today, they will share their impressions from the trip and a couple of photos they captured along the way. Below, we are also bringing a few screenshots from the work-in-progress map!
"This was my second research trip to the US, and every time it's an incredible experience for me.Β It boasts not only amazing nature and landscapes, but also rich and beautiful cities. Before the trip, we were a bit worried that Indiana would be a state full of fields, but we were completely wrong. It was a great experience, and I'm really glad that my team and I get to build this wonderful state and show players all the beauty and hidden gems Indiana has to offer," Dubak told us.
They travelled across the state, visiting many of its cities and landmarks, from Indianapolis to Fort Wayne, Evansville, South Bend, and more. "We were blown away by the memorial and the Capitol in Indianapolis, and we also checked out a massive steel mill in East Chicago, Lake Monroe, and the Indiana Dunes National Park," Dubak said.
During their nine-day journey, the team gathered plenty of references and experienced the atmosphere of each place they visited. They explained that walking the streets and visiting these places in real life before recreating them in the editor was a completely new experience.
"As a map designer, I was thrilled to have the opportunity to visit the US in person.Β You can feel the atmosphere and the scale of everything around you. Personally, I enjoyed all the landmarks in Indiana - from courthouses and churches to banks, statues, historical monuments, memorials, and murals, not to mention the small details here and there. History has shaped the US greatly, and you have the opportunity to experience that," LukΓ‘Ε‘ shared with us.
Being there in person also reveals smaller details that can be difficult to notice through street view or other sources. This helps the team understand what is important to include in the game and what gives each place its authentic feel.
"As a map designer, I looked for all the details that make every corner authentic.Β If you are sufficiently attentive, you can find a lot of interesting stuff around. For example, I learned that bigger is better. You can hardly go wrong with that. I also love discovering all the different advertisements, billboards, and signs. I created a large photo gallery of them so that our branding and asset team could use them as inspiration for the state of Indiana and upcoming projects. We also saw an Amish community in the region, which was really interesting. Overall, the research trip was a great experience, and I would love to come back for more inspiration," LukΓ‘Ε‘ said.
For Martin, it was the diversity of Indiana's landscapes and the roads connecting them that made the biggest impression.
"I was amazed by how diverse the landscape actually is, with plenty of forested areas that transition into national parks, wetlands, prairies, and even sand dunes up north along Lake Michigan.Β What captivated me the most was probably the scenic IN-46 highway between Bloomington and Columbus. The road winds through the Norman Upland, home to Indiana's largest state park, Brown County State Park. We drove through many towns packed with truly memorable landmarks. In the capital, Indianapolis, it was fascinating to see modern skyscraper architecture blending with historic buildings, churches, cathedrals, and beautifully maintained parks," Martin shared with us.
Even Spekin was surprised by some of the things he saw during the trip, despite his role as a researcher, which means he spends a lot of time studying upcoming DLC areas and preparing references for the rest of the team.
"I was shocked by how big everything is in the US. For example, flags, totems, grain bins, or even roads and countryside are not as straight as they seem on street view, and you can also see the elevation. We observed and measured everything from a random curb in the city to grown corn in the countryside, so the biggest task was just not to look suspicious while capturing those details," he told us.
As a researcher, Spekin records everything that could be useful to other departments and considers how these references could be used in the game, while keeping our scale and other map limitations in mind: "Sometimes a reference can be just for inspiration, like night photos of buildings with neon lights or backlit advertisements, which are often difficult to find. During the trip, however, this was much easier, as we often arrived at our final destination late at night," he shared.Β
"It might sound weird, but I like farm areas, so grain elevators, barns, and animals are my favorite ones, so you can probably guess what my photo library looks like. I also love industrial zones, so I really enjoyed Gary Steel Works, even though we saw it only from the outside. We also visited a few old covered bridges in Indiana, and I know it's just an old bridge, but I liked it a lot. Of course, I enjoyed the whole trip, every city and every town. I wish we could put everything into the game," Spekin says.
While our work on the map is still in its early stages, we also wanted to give you a small preview of what's already getting done.Β
Here, you can see a few locations that are taking shape for the Indiana DLC, including the public library in Evansville, Acy Lake, and locations around Indianapolis and along I-69 and US 30.
And that's it from today's blog! We hope you have enjoyed this report from our research trip to Indiana. If you are looking forward to exploring the Hoosier State like we did, be sure to add the Indiana DLC to your Steam wishlist and show your support to our team working on it!
Device addresses can now be configured using a fully qualified domain name instead of an IPv4 address. UpSnap resolves regular hostnames through DNS and .local hostnames through mDNS before pinging, waking, shutting down, or putting a device to sleep.
Changelog
Others
9f05b1c: Docker - add line in compose for dbus if using fqdn with .local domain (#1772) (@invario)
b17b091: feature: Support use of FQDN resolution with DNS and mDNS (#1760) (@invario)
Added a read-only API endpoint to retrieve preview deployment runtime logs by application UUID and pull request ID, with line limits and optional timestamps. (#11884)
Fixes
Fixed deployment status and metadata processing when remote command output contained leading or trailing whitespace.
What's Changed
feat(api): expose runtime logs for preview deployments by @andrasbacsai in #11884
Β The Stable channel has been updated to 153.0.8010.52/.53 for Windows andMac andΒ 153.0.8010.52 toΒ Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the LogΒ
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 16 security fixes. Please see the Chrome Security Page for more information.
[TBD][500417361] Critical CVE-2026-93374: Use after free in Dawn. Reported by Florian Schweitzer on 2026-04-08
[N/A][548085797] Critical CVE-2026-93372: Buffer overflow in WebGL. Reported by Google on 2026-08-17
[$3,000][550839154] High CVE-2026-93375: Incorrect reference resolution in Tracing. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-08-22
[TBD][541707261] High CVE-2026-93382: Use after free in PDFium. Reported by WinD39 - Huynh Dinh Vu on 2026-08-02
[N/A][553130676] High CVE-2026-93387: Improper state validation in Skia. Reported by Google on 2026-08-26
[N/A][553132214] High CVE-2026-93373: Use after free in Extensions. Reported by Google on 2026-08-26
[TBD][556853443] High CVE-2026-93381: Buffer overflow in PDFium. Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722) on 2026-09-03
[TBD][560039872] High CVE-2026-93379: Incorrect authorization in ORB. Reported by OGINOME Tomohito on 2026-09-11
[N/A][560121552] High CVE-2026-93377: Type confusion in V8. Reported by Google on 2026-09-11
[N/A][498411599] Medium CVE-2026-93380: Race condition in FileSystem. Reported by Google on 2026-04-01
[N/A][511832293] Medium CVE-2026-93384: Server-side request forgery in Omnibox. Reported by Google on 2026-05-10
[N/A][515493668] Medium CVE-2026-93383: Information leak in Permissions. Reported by Google on 2026-05-22
[N/A][520521197] Medium CVE-2026-93376: Out of bounds read in DataTransfer. Reported by Google on 2026-06-05
[N/A][540051167] Medium CVE-2026-93378: Missing authorization in Storage. Reported by Google on 2026-07-28
[N/A][553136980] Medium CVE-2026-93385: Information leak in Paint. Reported by Google on 2026-08-26
[N/A][513996595] Low CVE-2026-93386: UI misrepresentation in WebAppInstalls. Reported by Google on 2026-05-17
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
Β The Extended Stable channel has been updated to 152.0.7977.134Β for Windows and Mac which will roll out over the coming days/weeks.
A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
On Friday, September 18, Apple Store locations around the world introduced customers to the iPhone 18 Pro lineup, Apple Watch Series 12, Apple Watch Ultra 4, and AirPods 5.
This release fixes six vulnerabilities reported by Jan Kahmen (turingpoint). Please update.
Mail: HTML mail could run script in the webmail origin. cid: references were rewritten to blob: URLs that kept the sender's Content-Type, and the reverse proxy skipped every security header β CSP included β on app paths whose last segment contains a dot, although the signed-in mail, calendar, contacts and files routes render there. Blob URLs are now retyped as inert, link clicks from the message frame are gated by scheme, and the proxy only skips headers for an explicit static-asset allowlist (GHSA-xvjh-v9c6-qcvc, thanks @kah-ja)
Auth: POST /api/auth/session and POST /api/auth/stalwart-context minted identity cookies without checking the supplied credentials against the JMAP server, so anyone could obtain a cookie for an arbitrary username and read that user's server-side settings. Credentials are now verified upstream before a cookie is issued: Basic credentials are bound to the account they authenticate, Bearer tokens to the session's username and identity. Deployments whose webmail container cannot reach the JMAP server no longer receive identity cookies, so cross-device settings sync stops working there (GHSA-wxcm-j4jc-9fxq, thanks @kah-ja)
Plugins: The /plugin-sandbox runtime trusted whichever window posted the first message, so a foreign site could window.open() it, post its own init, and run code under the route's unsafe-eval CSP in the app origin β with or without plugins enabled. The sandbox now only accepts its framing window, and the proxy refuses to serve the route outside an iframe or when plugins are disabled (GHSA-96cx-gx36-3g79, thanks @kah-ja)
Auth: Encrypted payloads now carry a purpose, so a WOPI editor access token can no longer be presented as a jmap_stalwart_ctx session cookie (GHSA-cqqx-mjcf-mh55, thanks @kah-ja)
Auth: Reject cross-site requests to /api/auth/*. A malicious page could POST the victim's browser into an attacker-controlled account (session fixation) (GHSA-qvr9-m8cq-7wvg, thanks @kah-ja)
Mail: Strip CR/LF and other control characters from the header values of generated read receipts. A crafted, RFC 2047-encoded subject could inject additional headers into the receipt (GHSA-w38p-hpqv-g89c, thanks @kah-ja)
Auth / Branding: Pin the resolved IP at connect time for stored custom JMAP endpoints and branding URLs too, closing the DNS-rebinding gap left after GHSA-24w9-8r42-8jwm
Features
Search: Global search across mail, contacts, calendar and files β query parser, ranking and cross-account providers, a search palette, and a search tab in the Pro shell with avatars, tinted icons and structured previews (#641); hits open through the owning login on every surface (#847)
Files: Office document editing through WOPI β Collabora Online, OnlyOffice and EuroOffice (#425); the demo Files drive ships office document fixtures and a word-processor icon
Calendar: Freely scrolling month, week and day views (#759), infinite scroll in the agenda view, and a setting to turn free scrolling off
Calendar: Recurring occurrences use Stalwart's synthetic ids (#140)
Calendar: Attendee free/busy via Principal/getAvailability
Calendar: Invitations and updates surface from CalendarEventNotification, and invitations are organized as the default ParticipantIdentity
Mail: Per-message HTML / plain-text toggle (#1022)
Mail: Share mail folders with other users via mail:share; share notifications appear as toasts
Mail: Search hits are highlighted with SearchSnippet/get
Mail: Pushes are resolved with Email/changes and Mailbox/changes deltas instead of refetching the list
Mail: Attachments show on list rows and open from there (#947, thanks @shukiv)
Mail: Filter advanced search by message size
Mail: Deleting a non-empty folder offers to delete its messages along with it
Mail: "Clear search when switching folders" setting (#852, thanks @shukiv)
CI: The test suite runs on every push and pull request (#647)
Dev: FileNode and blob round-trip in the mock JMAP server, and WOPI on the same-origin dev server
Changes
Docs: Installer section removed from the README and formatting cleaned up
Security policy: New vulnerability report email address
Fixes
Filters: Render the "Keep" action as fileinto "INBOX" (#1027)
Mail: List tagged mail from every account in the tag view, not just the selected folder's account (#1038)
Mail: Dragging a message out of the list could hang the tab when generated .eml file names collided (#1039)
Mail: Preserve label filtering during mailbox refreshes (#1017, thanks @ctaoist)
Mail: Hide body-embedded cid: parts declared as application/octet-stream from the attachment list (#1005, thanks @dealerweb)
Mail: Stop stretching images that carry their own max-width (#1034, thanks @shukiv), and let sender tables keep theirs (#790)
Mail: Refetch the body when JMAP truncates the displayed part instead of rendering a blank message (#928, thanks @hildebrandttk)
Mail: Auto-detect text direction in the read, print, plain-text, thread and .eml preview views (#663, thanks @shukiv)
Mail: Open search hits from shared folders in the right account (#923)
Mail: Collapse search hits for the same server object reached through several logins (#641)
Mail: Guard quick search against stale responses (#872, thanks @vj1235432)
Mail: Only show the unified mailbox section when it can be populated (#843), and stop it missing accounts that had not connected yet (#959, thanks @hildebrandttk)
Mail: Surface Email/set failures on delete and move (#956)
Mail: Report a missing archive mailbox instead of failing silently (#578), and archive shared-inbox mail into the owner's archive (#889)
Mail: Mark as spam from the viewer after the message left the list (#695)
Mail: Sort folders in the role assignment dropdown (#984)
Mail: Add the missing "Scheduled" folder role label (#495)
Mail: Wire the x shortcut to thread expansion (#683)
Mail: Keep the reading-mode toggle mounted so toolbar buttons stop jumping (#964)
Mail: Stop the batch toolbar hiding the message you just selected (#948, thanks @shukiv), keep rows in place when it opens, and drop the duplicate selection checkbox
Mail: Align the unread dot with the first line (#715, thanks @lucletoffe) and centre the sender avatar against the row (#953, thanks @shukiv)
Mail: Use Simplified Chinese for the selected-messages label (#786)
Send: Send from the address a message was delivered to (#991, thanks @rotterp)
Send: Set the answered flag when a reply goes out with a send delay (#985)
Composer: Upload attachments through the composing identity's account (#943)
Composer: Pro compose tabs default their From to the open mailbox (#990, thanks @rotterp)
Calendar: Jump to the day picked in the mini calendar (#1037, thanks @dealerweb)
Calendar: Wait for the JMAP client before loading the account principal, and recognise a refused principal read by its JMAP error type (#1036, thanks @dealerweb)
Calendar: Dedupe participants, resolve contact names across alias domains, and show the organizer's status (#986, thanks @ibayue)
Calendar: Linkify URLs in the event description (#968, thanks @lucletoffe)
Calendar: Normalize task progress states (#994, thanks @mulatta) and omit progressUpdated from the task completion payload (#958, thanks @sanitz)
Calendar: Preserve task alarms that the edit dialog does not show (#504)
Calendar: Report calendar clear failures instead of counting zero (#434)
Calendar: Make the iCal subscription size limit configurable and show the real error (#692)
Calendar: Paginate the event fetch on import so UID deduplication sees all existing events (#113)
Contacts: Strip the local-account prefix from address-book ids on contact update (#1043)
Contacts: Set name.full on all write paths so vCards carry the mandatory FN (#430)
Contacts: Create new contacts in the selected address book (#940, thanks @ponchofiesta)
Accounts: Detect HTTP/2 from the initial navigation timing so accounts are not capped at five (#1003, thanks @lucamzanon)
Auth: Reject wrong passwords server-side so the browser never shows its Basic Auth dialog (#969)
Auth: Stop retrying token refreshes that fail permanently (#972)
Auth: Normalize the OAuth discovery base so a session JMAP_SERVER_URL refreshes (#971, thanks @thejdubb02)
Auth: Use the selected server's issuer for SSO discovery (#952)
Auth: Retry the JMAP session fetch when a redirect drops the auth header (#892)
Auth: Drop max_age=0 from OIDC re-authentication requests (#938)
Auth: Require a session for the translate API (#903)
Mobile: Keep the actions panel below the status bar and pad attachment preview overlays for the iOS PWA safe area (#936)
Mobile: Render plain-text-only mail as text in the thread view (#489)
Mobile: Stop the More menu flashing open when a message is opened
Mobile: Dismiss the search panel once a search runs, open the folder drawer from the right in RTL (#944, thanks @shukiv), and keep the account switcher header on screen
PWA: Focus the client before navigating on notification click (#914, thanks @bitfactory-dk)
Push: Resolve push previews for shared and group mailboxes (#839)
Plugins: Allow sandbox chunk loading with CORS (#922, thanks @mulatta)
Plugins: Fail fast when the plugin storage database is blocked (#840)
Plugins: Refill missing managed bundles from the server (#636)
Plugins: Translations for plugins installed from the marketplace (#939, thanks @paulhenry46)
Settings: Index newer settings and the flat calendar toggles in the settings search
Settings: Invalidate the persisted update status after an upgrade
UI: Readable native <select> option lists in dark themes (#999)
i18n: German update (#1031, thanks @GyroGearl00se), "Forward as attachment" in more languages (#1016, thanks @dulinux), toolbar keys for nb and zh-TW (thanks @ibayue), and managed sidebar-app keys for zh-TW
i18n: Preserve locale cookie precedence and normalize Chinese proxy locale detection (thanks @kchuang1015); keep basePath when normalizing a Chinese Accept-Language
The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The Parted Magic project has published a new release. The new version, 26.09, has moved its base from Slackware 15.0 to Slackware's development (Current) branch. The release announcement, available on the distribution's news page states: "There is a new disk cloner in this release. Wipe Free Space has....
Log in
