Skip to content

release: MailStack 1.3.0-rc.4 - #9

Merged
victorsteele merged 3 commits into
mainfrom
release/1.3.0-rc.4
Aug 17, 2026
Merged

release: MailStack 1.3.0-rc.4#9
victorsteele merged 3 commits into
mainfrom
release/1.3.0-rc.4

Conversation

@victorsteele

Copy link
Copy Markdown
Contributor

Summary

Promote the PHASE-003 installation/recovery hardening plus the RC3 dependency-security fix and RC4 cross-platform audit-runtime hardening into main as MailStack 1.3.0-rc.4.

Qualification

  • Branch CI run 32064837437: PASS
  • Dependency vulnerability audit: PASS (sqlparse==0.6.0, no known vulnerabilities)
  • Ruff/Bandit: PASS
  • Django test suite: 198 passed
  • Coverage: 95.00% (>=85% gate)
  • Installer contract tests: PASS
  • Backup/operations contract tests: PASS
  • Full forensic audit: PASS
  • Deterministic release build + verification: PASS
  • Release SHA256: 58f06adea7c813e9861799d20e392441367bf64f6513d6e0634455d2011d4eac

Scope

Preserves the receive-only architecture and existing UI/routes/auth/mail-flow contracts. Includes PHASE-003 install/recovery/LMTP/ingestion fixes, security upgrade of sqlparse to 0.6.0, and Windows local audit-runtime compatibility without changing the Ubuntu production installer contract.

Acceptance note

This is a release candidate. Existing staging previously validated real inbound SMTP/LMTP delivery; an exact-RC4 clean-host reinstall is deferred until a fresh VPS is available.

@victorsteele
victorsteele merged commit 896dbcc into main Aug 17, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant