What's Changed
Features
- [Web] Add ACL + global switch to disable external alias goto by @FreddleSpl0it in #7428
- [Web] Add show/hide password toggle on login pages by @FrauJulian in #7342
Fixes
- Fix #7150: passwd-verify.lua wipes auth cache during any nginx outage by @wryfi in #7290
- [Web] use absolute RHS names in generated DNS zonefile by @smpaz7467 in #7347
- [Web] redirect deep links to the matching login page by @smpaz7467 in #7349
- [Web] show external sender addresses regardless of authsource by @smpaz7467 in #7376
- [Web] translate password errors in the forced password change modal by @smpaz7467 in #7344
Updates
- [Unbound] Update to 1.26.1 by @FreddleSpl0it in #7473
- [SOGo] Update to 5.12.11 by @FreddleSpl0it in #7475
- Update redis Docker tag to v7.4.11 by @renovate[bot] in #7432
- postfix-tlspol: upgrade to trixie + 1.11.0 update by @DerLinkman in #7334
- Translations update from Weblate by @milkmaker in #7431
- [Postfix] update postscreen_access.cidr by @milkmaker in #7450
- Translations update from Weblate by @milkmaker in #7457
- Translations update from Weblate by @milkmaker in #7460
New Contributors
- @wryfi made their first contribution in #7290
- @FrauJulian made their first contribution in #7342
Full Changelog: 2026-07b...2026-09