Starstruk Logo MarkStarstruk

2026-03

mailcow/mailcow-dockerized2026-03Mar 10, 2026by FreddleSpl0it

AI Summary

Major update introducing forced 2FA setup, DNS-01 ACME challenges, significant updates to SOGo and Rspamd, and a passwordless autodiscover endpoint.

Key Highlights

  • Add forced 2FA setup and password update enforcement
  • Add DNS challenges for ACME
  • Update SOGo to 5.12.5 and Rspamd to 3.14.3-1
  • Implement passwordless autodiscover endpoint

New Features

  • Forced 2FA setup and password update enforcement
  • Skip feature for mailcow admin password reset script
  • Passwordless autodiscover endpoint
  • DNS challenges for ACME
  • SOGo build from source with security patches
  • Rspamd update to 3.14.3-1

Full Release Notes

## What's Changed

### New Features
* [Web] Add forced 2FA setup and password update enforcement by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7077
* Add skip feature to mailcow admin password reset script by @HichemAK in https://github.com/mailcow/mailcow-dockerized/pull/7078
* feat: Implement passwordless autodiscover endpoint by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/6976
* acme: add DNS challenges by @cjlapao in https://github.com/mailcow/mailcow-dockerized/pull/6912 [(Documentation)](https://docs.mailcow.email/post_installation/firststeps-ssl-dns/)
* [SOGo] Build SOGo from source with security patches by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7086
* [SOGo] Update to 5.12.5 by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7098
* [Rspamd] Update to 3.14.3-1 by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7100

### Bug Fixes
* Fix lua script sub-addressing by @DocFraggle in https://github.com/mailcow/mailcow-dockerized/pull/7037
* Document qitem endpoint in openapi.yaml for editing quarantine mails by @jonprocter in https://github.com/mailcow/mailcow-dockerized/pull/7047
* check_dns: better time measurement by @maxi322 in https://github.com/mailcow/mailcow-dockerized/pull/6695
* fix: show stopped and failed containers in dashboard and API by @JeremieCrinon in https://github.com/mailcow/mailcow-dockerized/pull/7082
* Bump alpine version of netfilter by @jovobe in https://github.com/mailcow/mailcow-dockerized/pull/7060
* [Web] Add missing EAS and DAV protocol options to mailbox bulk actions by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7088
* [Web] switch from GET to POST for datatable requests by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7089
* [SOGo][Web] use incremental updates for mailbox/alias/resource sync in sogo_static_view by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7093

### Other
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7040
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7055
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7069
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7091
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7095
* [Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7042
* [Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7084
* Update actions/stale action to v10.2.0 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7062
* Update docker/build-push-action action to v7 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7097
* chore(deps): update dependency composer/composer to v2.9.5 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/6457
* chore(deps): update docker/setup-qemu-action action to v4 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7092
* chore(deps): update docker/login-action action to v4 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7094
* chore(deps): update docker/setup-buildx-action action to v4 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7096

## Notes
**Special thanks to Philipps-Universität Marburg for sponsoring the development of the forced 2FA setup feature in this release and supporting the continued security improvements of mailcow.**

## New Contributors
* @HichemAK made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/7078
* @jonprocter made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/7047
* @JeremieCrinon made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/7082
* @jovobe made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/7060
* @cjlapao made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/6912

**Full Changelog**: https://github.com/mailcow/mailcow-dockerized/compare/2026-01...2026-03