v1.76.2 (2026-09-27)
Release Highlights
- Update shoutrrr to v0.21.1 and harden SMTP OAuth2 auth (#905)
- shoutrrr v0.21.1 adds Signalgrid, Home Assistant, and XMPP notification services and overhauls the Signal service.
- SMTP auth=OAuth2 now sends the access token only over TLS or to localhost, and only to the configured host. Before, an OAuth2 SMTP URL without TLS sent the token in plaintext; now that send fails before the token leaves. The default settings use STARTTLS.
- Plus-tagged recipient addresses (user+tag@example.com) keep working.
- SMTP auth=Login is not supported yet. Such a URL now parses, and sending fails with "unsupported smtp auth type".
- Builds now require Go 1.27. The Docker images already built with it.