v0.16.2

stalwartlabs/stalwartv0.16.2Apr 28, 2026by github-actions[bot]

AI Summary

Added OIDC fallback and S3 verification options, alongside fixes for LDAP and DNS Updater issues.

Key Highlights

Added OIDC fallback to `userinfo` endpoint when JWT token lacks email.
Added `verifyAfterWrite` option for S3 storage.
Fixed LDAP credential ID generation on password changes.
Fixed DNS Updater handling for BunnyDNS and RFC2136 TXT records.

New Features

OIDC fallback to userinfo endpoint
S3 `verifyAfterWrite` option

Full Release Notes

## [0.16.2] - 2026-04-28

If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If you are upgrading from v0.15.x and below, please read the [upgrading documentation](https://github.com/stalwartlabs/stalwart/blob/main/UPGRADING/v0_16.md) for more information on how to upgrade from previous versions.

## Added
- OIDC: Fallback to `userinfo` endpoint when JWT token does not contain an email claim.
- S3: `verifyAfterWrite` option to verify that objects have persisted after writing.

## Changed
- Allow HTTP to be used for configuring the server.

## Fixed
- LDAP: Generate valid `credentialId` when there are password changes.
- TLS: Disable cipher suited option disables wrong ciphers.
- DNS Updater:
  - BunnyDNS: Use subdomain as name of record instead of FQDN.
  - RFC2136: Chunk TXT records.
- Skip invalid entries in log files.


<hr />

### Check binary attestation [here](https://github.com/stalwartlabs/stalwart/attestations/25844634)