Postal

Developer Tools

A self-hosted mail delivery platform for sending and receiving application email.

Latest 3.3.7 · by PostalWebsitepostalserver/postal

Release activity

Release activity — 3 releases across 3 days in the last year. Each cell is one day; darker means more releases that day. Older weeks are hidden at this screen width.
MayJunJulAug
SundayNo releases on Apr 26, 2026No releases on May 3, 2026No releases on May 10, 2026No releases on May 17, 2026No releases on May 24, 2026No releases on May 31, 2026No releases on Jun 7, 2026No releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026
MondayNo releases on Apr 27, 2026No releases on May 4, 2026No releases on May 11, 2026No releases on May 18, 2026No releases on May 25, 2026No releases on Jun 1, 2026No releases on Jun 8, 2026No releases on Jun 15, 2026No releases on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026No releases on Aug 10, 2026
Tuesday1 release on Apr 28, 2026No releases on May 5, 2026No releases on May 12, 2026No releases on May 19, 2026No releases on May 26, 2026No releases on Jun 2, 2026No releases on Jun 9, 2026No releases on Jun 16, 2026No releases on Jun 23, 2026No releases on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 2026
WednesdayNo releases on Apr 29, 2026No releases on May 6, 2026No releases on May 13, 2026No releases on May 20, 2026No releases on May 27, 20261 release on Jun 3, 2026No releases on Jun 10, 2026No releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026
ThursdayNo releases on Apr 30, 2026No releases on May 7, 2026No releases on May 14, 2026No releases on May 21, 2026No releases on May 28, 2026No releases on Jun 4, 2026No releases on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 2026
FridayNo releases on May 1, 2026No releases on May 8, 2026No releases on May 15, 2026No releases on May 22, 2026No releases on May 29, 2026No releases on Jun 5, 2026No releases on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026
SaturdayNo releases on May 2, 2026No releases on May 9, 2026No releases on May 16, 2026No releases on May 23, 2026No releases on May 30, 2026No releases on Jun 6, 2026No releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 2026No releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026

3 releases in the last year

Changelog

3.3.7

v3.3.7

Fixed 1
  • Stub IPv6 support in address guard IPv6 literal spec
Security 2
  • Prevent SSRF in outbound webhook and HTTP endpoint requests
  • Prevent SQL injection via condition keys
3.3.7 (2026-06-03)
Bug Fixes
  • http: prevent SSRF in outbound webhook and HTTP endpoint requests (11c9814)
  • message-db: prevent SQL injection via condition keys (GHSA-x2hq-rfpg-3xr5) (4314a6e)
  • specs: stub IPv6 support in address guard IPv6 literal spec (029bfe0)
Miscellaneous Chores
  • deps: upgrade rack & rails (0445e5c)
  • update security vulnerability reporting instructions (8be1e27)
View originalPermalink
How 3.3.7 went
3.3.6

v3.3.6

Removed 1
  • Remove unused src image proxy from tracking
Security 3
  • Sandbox rendered email HTML as extra XSS defence
  • Tighten return_to validation in authentication
  • Escape interpolated values in select options
3.3.6 (2026-04-28)
Bug Fixes
  • messages: sandbox rendered email HTML as extra XSS defence (cad2aa6)
Miscellaneous Chores
  • ignore node modules and yarn.lock (b611d57)
Code Refactoring
  • auth: tighten return_to validation (84f4e20)
  • helpers: escape interpolated values in select options (9243524)
  • tracking: remove unused src image proxy (dca7f90)
View originalPermalink
How 3.3.6 went
3.3.5

v3.3.5

Changed 5
  • Upgrade Puma, net-imap and other dependencies
  • Reduce Docker container size
  • Upgrade resolv to 0.6.2
  • Upgrade to Rails 7.1 and Ruby 3.4
  • Upgrade URI gem to 1.0.3
Fixed 5
  • Use rackup handler instead of rack handler in health_server
  • Fix invalid OIDC scopes when concatenated
  • Fix typo in process logging
  • Fix typo in the credentials page
  • Update URL for v2 config
Security 1
  • Escape delivery details to prevent HTML injection
3.3.5 (2026-02-01)
Bug Fixes
  • deliveries: escape delivery details to prevent HTML injection (11419f9)
  • health_server: use rackup handler instead of rack handler (7c47422)
  • oidc scopes are invalid when concatenated (#3332) (9c5f96a)
  • typo in process logging (#3212) (b7e5232)
  • typo in the credentials page (fd3c7cc)
  • update url for v2 config (#3225) (e00098b)
Documentation
  • process.rb: add help about time unit used by metric (#3339) (f5325c4)
Miscellaneous Chores
  • deps: upgrade puma, net-imap and other deps (c03c44b)
  • dockerfile: reduce container size (86de372)
  • remove version from docker-compose.yml (c78000c)
  • upgrade resolv to 0.6.2 (d00d978)
  • upgrade to rails 7.1 and ruby 3.4 (#3457) (ab6d443)
  • upgrade uri gem to 1.0.3 (f193b8e)
View originalPermalink
How 3.3.5 went
3.3.4

v3.3.4

Fixed 3
  • Fix postal version command
  • Fix issue running message pruning task
  • Raise NotImplementedError when no call method on a scheduled task
3.3.4 (2024-06-20)
Bug Fixes
  • fix postal version command (4fa88ac)
  • fix issue running message pruning task (3a33e53)
  • raise NotImplementedError when no call method on a scheduled task (2b0919c)
View originalPermalink
How 3.3.4 went
3.3.3

v3.3.3

Fixed 1
  • allow _expansions to be provided as true in legacy API to return all expansions
Bug Fixes
  • legacy-api: allow _expansions to be provided as true to return all expansions (39f704c), closes #2932
View originalPermalink
How 3.3.3 went
3.3.2

v3.3.2

Changed 1
  • Improve how current version and branch is determined and set
Code Refactoring
  • versioning: improve how current version and branch is determined and set (07c6b31)
View originalPermalink
How 3.3.2 went
3.3.1

v3.3.1

Changed 1
  • Remove moonrope but maintain legacy API actions
Fixed 2
  • Ensure relays without a host are excluded in SMTP sender
  • Fix SMTPSender.smtp_relays method
3.3.1 (2024-03-21)
Bug Fixes
  • smtp-sender: ensure relays without a host are excluded (3a56ec8)
  • smtp-sender: fixes SMTPSender.smtp_relays (b3264b9)
Miscellaneous Chores
  • container: add the branch name to the container (bee5098)
  • github-actions: don't generate commit- tags (d65bbe0)
  • github-actions: don't run for dependabot or release-please PRs and fetch whole repo (adaf2b0)
  • github-actions: include a version string on branch-*/latest images (64bc7dc)
  • ui: display branch in footer if present (1823617)
Code Refactoring
  • remove moonrope but maintain legacy API actions (#2889) (4d9654d)
View originalPermalink
How 3.3.1 went
3.3.0

v3.3.0

Added 3
  • Add postal_message_queue_latency Prometheus metric
  • Allow number of worker threads to be configured
  • Scale connection pool with worker threads
Fixed 1
  • Add ability to disable batching in message dequeuer
3.3.0 (2024-03-18)
Features
  • prometheus: add postal_message_queue_latency metric (ee8d829)
  • worker: allow number of threads to be configured (7e2accc)
  • worker: scale connection pool with worker threads (ea542a0)
Bug Fixes
  • message-dequeuer: ability to disable batching (4fcb9e9)
Miscellaneous Chores
  • config-docs: update docs for latest oidc defaults (364eba6)
  • config-docs: update proxy protocol to mention v1 (45dd8aa)
View originalPermalink
How 3.3.0 went
3.2.2

v3.2.2

Changed 3
  • allow config location message to be suppressed
  • hide further config messages
  • suppress config location on default-dkim-record
Fixed 2
  • don't use authentication on org & server deletion
  • fixes proxy protocol in smtp-server
3.2.2 (2024-03-14)
Bug Fixes
  • don't use authentication on org & server deletion (be45652)
  • smtp-server: fixes proxy protocol (9240612)
Miscellaneous Chores
  • allow config location message to be suppressed (f760cdb)
  • hide further config messages (1c67f72)
  • suppress config location on default-dkim-record (aa76aae)
Tests
  • add tests for the legacy API (3d208d6)
View originalPermalink
How 3.2.2 went
3.2.1

v3.2.1

Fixed 1
  • Fix postal default-dkim-record command
Bug Fixes
  • fixes postal default-dkim-record (58dddeb)
View originalPermalink
How 3.2.1 went

More in Developer Tools

View all
yt-dlp

A feature-rich command-line audio/video downloader

yt-dlp
Microsoft-Activation-Scripts

Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.

massgravel
Claude Code

Anthropic's agentic coding tool for the terminal, IDE and web.

Anthropic
tmux

tmux release notes.

tmux
Shadowrocket

Rule based proxy utility client for iPhone/iPad.

Shadow Launch Technology Limited
GitHub CLI

GitHub command-line tool

GitHub

Discussion