If you are upgrading from v0.16.x, replace the binary (or run docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.
Added
sd_notify support.
JMAP: Mailbox/set allows moving a mailbox under a parent that already has a child with the same name, and rejects renames that only change the case of a mailbox name with alreadyExists.
RocksDB: Blob garbage collection rewrites every stored blob on each compaction of the blobs column family, about once per 128MB of new mail.
Milter: End-of-headers is not sent to milters that negotiate SMFIP_NOHDRS without SMFIP_NOEOH, so the transaction stalls until it times out.
OIDC: When the access token lacks the claimUsername claim but has an email claim, the account is built from email without consulting the userinfo endpoint.
JMAP:
onSuccessUpdateEmail and onSuccessDestroyEmail entries in EmailSubmission/set that name an existing submission by id update or destroy the Email with the same id instead of the submission's own Email.
A VacationResponse/set that only sets isEnabled on an account without a vacation response activates an empty Sieve script.
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [docker.io/stalwartlabs/stalwart](https://github.com/stalwartlabs/stalwart) | app-version | patch | `v0.16.25` → `v0.16.26` |
---
> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/4) for more information.
---
### Release Notes
<details>
<summary>stalwartlabs/stalwart (docker.io/stalwartlabs/stalwart)</summary>
### [`v0.16.26`](https://github.com/stalwartlabs/stalwart/releases/tag/v0.16.26)
[Compare Source](https://github.com/stalwartlabs/stalwart/compare/v0.16.25...v0.16.26)
#### \[0.16.26] - 2026-10-11
If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If you are upgrading from v0.15.x and below, please read the [upgrading documentation](https://github.com/stalwartlabs/stalwart/blob/main/UPGRADING/v0_16.md) for more information on how to upgrade from previous versions.
#### Added
- `sd_notify` support.
- JMAP: `Mailbox/set` allows moving a mailbox under a parent that already has a child with the same name, and rejects renames that only change the case of a mailbox name with `alreadyExists`.
#### Changed
#### Fixed
- DNSSEC: Use `hickory-resolver` patched fork at <https://github.com/stalwartlabs/hickory-dns>.
- RocksDB: Blob garbage collection rewrites every stored blob on each compaction of the blobs column family, about once per 128MB of new mail.
- Milter: End-of-headers is not sent to milters that negotiate `SMFIP_NOHDRS` without `SMFIP_NOEOH`, so the transaction stalls until it times out.
- OIDC: When the access token lacks the `claimUsername` claim but has an `email` claim, the account is built from `email` without consulting the userinfo endpoint.
- JMAP:
- `onSuccessUpdateEmail` and `onSuccessDestroyEmail` entries in `EmailSubmission/set` that name an existing submission by id update or destroy the Email with the same id instead of the submission's own Email.
- A `VacationResponse/set` that only sets `isEnabled` on an account without a vacation response activates an empty Sieve script.
<hr />
##### Check binary attestation [here](https://github.com/stalwartlabs/stalwart/attestations/54830691)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Europe/Berlin)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTUuNiIsInVwZGF0ZWRJblZlciI6IjQ0LjE1NS42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhcHAtdmVyc2lvbiIsInJlbm92YXRlIl19-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v0.16.25→v0.16.26Release Notes
stalwartlabs/stalwart (docker.io/stalwartlabs/stalwart)
v0.16.26Compare Source
[0.16.26] - 2026-10-11
If you are upgrading from v0.16.x, replace the binary (or run
docker pull). If you are upgrading from v0.15.x and below, please read the upgrading documentation for more information on how to upgrade from previous versions.Added
sd_notifysupport.Mailbox/setallows moving a mailbox under a parent that already has a child with the same name, and rejects renames that only change the case of a mailbox name withalreadyExists.Changed
Fixed
hickory-resolverpatched fork at https://github.com/stalwartlabs/hickory-dns.SMFIP_NOHDRSwithoutSMFIP_NOEOH, so the transaction stalls until it times out.claimUsernameclaim but has anemailclaim, the account is built fromemailwithout consulting the userinfo endpoint.onSuccessUpdateEmailandonSuccessDestroyEmailentries inEmailSubmission/setthat name an existing submission by id update or destroy the Email with the same id instead of the submission's own Email.VacationResponse/setthat only setsisEnabledon an account without a vacation response activates an empty Sieve script.Check binary attestation here
Configuration
📅 Schedule: (in timezone Europe/Berlin)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.