peltonapp/Pelton v2026.4.4

on GitHub

Two features this time, both about getting connected to mail Pelton previously could not reach, and two new languages.

Mailboxes can trust their own certificate

Pelton refused any server whose certificate no public authority had signed. That ruled out Proton Mail Bridge, which runs on your own machine, and every self-hosted mail server with its own certificate.

A mailbox can now trust a certificate you have reviewed, or a certificate authority you supply. When a connection fails, Pelton shows you what the server presented, including the SHA-256 fingerprint to compare against the one Bridge or your server shows you, and you decide.

Verification is widened, never switched off. A certificate you accepted is matched exactly, byte for byte, and Pelton asks again if it ever changes. A certificate signed by your own authority is checked in the ordinary way, server name and expiry included. Trust applies to the one mailbox you granted it for and to nothing else.

Google Workspace accounts can sign in

School and work addresses hosted by Google need Google sign-in rather than a password. Pelton now recognises those domains while you are adding the mailbox and offers that route, with a walkthrough for creating the OAuth client it needs. Mailboxes already using Google or Microsoft sign-in get a Sign in again button for when access expires or is withdrawn.

Pelton has no application registered with Google and asks for none of your data. You create your own client, and the sign-in is between you and Google.

Two more languages

Simplified Chinese, contributed by @WillFunniers, and Italian, contributed by @rr74w9zwdm-svg. That makes eleven. Chinese also brings a bundled font, so the interface reads correctly on a system with no Chinese font of its own.

Sent mail is kept again

Messages were delivered but no copy was written to Sent, on the server or in Pelton. Sending reported success, so the only way to notice was to look for the message later in another client and not find it. Every account was affected.

If you sent mail with an earlier version, those copies were never written and cannot be recovered. From this version a copy is filed in the account's Sent folder as it always should have been, and appears wherever you read that mailbox.

Also

• A Logo only avatar setting, contributed by @rr74w9zwdm-svg: show the sender's own logo where they publish one, and the generated avatar otherwise, without asking Gravatar about your correspondents.
• Mailboxes using Google or Microsoft sign-in asked for a new access token on every single connection instead of keeping the one they had until it expired. Fewer round trips, and noticeably less work at startup.
• A selected row could stay highlighted after a search replaced the list, contributed by @lux-liang.
• The language picker no longer borrows an unrelated country's flag for a language that has none of its own, which is why Arabic appeared next to Portugal's flag.

Changes

• feat: trust self-signed and custom-CA server certificates per mailbox - @TRC-Loop in #453
• feat: google workspace oauth sign-in - @TRC-Loop in #452
• feat(i18n): add Simplified Chinese localization - @WillFunniers in #439
• Feature/add italian support - @rr74w9zwdm-svg in #448
• Add support for Logo -> Generated Avatar preset - @rr74w9zwdm-svg in #444
• fix: append a copy of every sent message to the sent folder - @TRC-Loop in #455
• fix: show no borrowed flag for a language that has none - @TRC-Loop in #456
• fix: clear stale row highlight after search - @lux-liang in #443
• i18n: add the certificate trust strings to italian - @TRC-Loop in #454
• chore: regenerate the wails bindings - @TRC-Loop in #450
• ci: run the frontend checks on node 24 - @TRC-Loop in #449
• chore(deps): Bump the frontend-dependencies group across 1 directory with 8 updates - @dependabot[bot] in #423
• chore(deps): Bump the go-dependencies group across 1 directory with 3 updates - @dependabot[bot] in #422

Full Changelog: v2026.4.3...v2026.4.4

Checksums

SHA-256 of every file on this release, also published as SHA256SUMS.txt, which sha256sum -c reads directly.

Pelton is free software under the GPL-3.0, provided without warranty and used at your own risk. It connects to your real mailboxes, deletions can be permanent, and Pelton is not a backup tool. Keep your own backup of anything you cannot afford to lose.

Warranty and liability: DISCLAIMER.md - pelton.app/terms