2.2.1

inboundemail/inbound2.2.1Mar 10, 2026by louislam

AI Summary

A patch release introducing a new notification provider, UI fixes, and a critical security fix regarding Server-side Template Injection (SSTI).

Key Highlights

New Fluxer notification provider
UI fixes for input styling
Critical security fix for SSTI vulnerability

New Features

Fluxer notification provider
Process title updated to uptime-kuma
UI fixes for fluxer input styling
Removal of uptime ratio and avg. response time metrics
Dependency updates

Full Release Notes

### 🆕 New Features
- #7109 feat: fluxer notification provider (Thanks @letruxux)
- #7096 feat: set process.title to uptime-kuma (Thanks @Hill-98)

### 🐞 Bug Fixes
- #7121 fix: isParentActive return type to boolean (Thanks @terisikk)
- #7110 fix(ui): fix fluxer input styling; make discord input hidden (Thanks @letruxux)
- #6915 fix: removal of uptime ratio and avg. response time from prometheus metrics (Thanks @tr4nt0r)
- #7101 fix: revert: remove @aws-sdk, @azure packages 

### ⬆️ Security Fixes
GHSA-v832-4r73-wx5j - Another Server-side Template Injection (SSTI) in Notification Templates Allows Arbitrary File Read (fixed in upstream dependency LiquidJS, also see: https://github.com/harttle/liquidjs/security/advisories/GHSA-wmfp-5q7x-987x)

### 🦎 Translation Contributions
- #7119 #7099 chore: Translations Update from Weblate (Thanks @aindriu80 @Aluisio @cyril59310 @dodog @fabianovich @krmu @letruxux @maxisimonazzi @MrEddX)

### Others
- #7120 #7100 chore: Update dependencies