-
v0.1.13
Stablereleased this
2026-10-18 14:38:57 +02:00 | 97 commits to main since this releaseDavar v0.1.13
- Harden the browser UI: disable htmx script-tag/eval handling, and honor
X-Forwarded-Proto: httpsfrom a loopback TLS-terminating proxy when setting
the session cookie'sSecureflag. - Bound the command-line event stream: a stalled SSE connection is cancelled
after 90 seconds of silence (the daemon heartbeats every 20–30 seconds). - Cap
Store.PutBlobat the 64 MiB MIME limit so no caller can write an
unbounded blob. - Refactor the CLI: one
resolveFolderRoutegrammar drives dispatch and leaf
help, account paths go throughaccountPath, and routine account/folder
verbs are declared once and shared by dispatch, Cobra, and usage text. - Centralize account API path building in the REST handlers and web UI.
- Run the Playwright web UI suite in Forgejo CI (with Go, Node, and Chromium),
enforce a 65% total-coverage floor, and fix the suite's navigation-race
teardown. - Add the code review report and clarify the original-styling CSS contract,
userinfo URL handling, andfolder unreadshadowing behavior. - Refresh the AUR
davar-binpackage to v0.1.12 (now superseded by this
release's assets).
No breaking command or API changes. Linux amd64 and arm64 executables and
SHA-256 checksums are attached. See README.md for commands and
packaging/aur/davar-bin for Arch installation.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Harden the browser UI: disable htmx script-tag/eval handling, and honor
-
v0.1.12
Stablereleased this
2026-10-18 13:26:07 +02:00 | 114 commits to main since this releaseDavar v0.1.12
- Complete the embedded browser UI: responsive mailbox tree, message list
controls, Ctrl/Shift and keyboard selection, hover summaries, bulk and
context actions, move picker, and Trash/Spam restore. - Render sanitized HTML mail in a sandboxed reader with explicit remote-image
consent, remembered per-sender choices, original-styling view, and Light,
Dark, and System themes. Remote media defaults to never. - Add the virtual Unread view and
davarctl account ACCOUNT_ID folder unread list, spanning cached Inbox and custom folders with source-folder reporting. - Add collection
PATCHmessage actions (read,unread,star,unstar,
trash,spam,restore,not_spam,move) and foldermark_readand
rename endpoints. - Allow sending with Cc/Bcc recipients only, omitting an empty
Toheader. - Include each message's stored MIME
sizein listings, with a rounded Size
column in CLI tables. - Cache folder lists and the reader for faster navigation, print messages in an
isolated view, and show non-selectable folder containers as group controls. - Reject duplicate active folder sync requests instead of queueing redundant
work.
Linux amd64 and arm64 executables and SHA-256 checksums are attached. See
README.md for commands and packaging/aur/davar-bin for Arch installation.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Complete the embedded browser UI: responsive mailbox tree, message list
-
v0.1.11
Stablereleased this
2026-10-15 14:49:37 +02:00 | 142 commits to main since this releasev0.1.11
- Add
GET /api/v1/user/meto identify the authenticated built-in user and role. Both full-access and read-only keys are supported; responses contain onlyidandroleand are not cached. - Add
GET /api/v1/useranddavarctl user listto list existing built-in users and their roles. - Replace the previous key-rotation interface with
PATCH /api/v1/user/{user}anddavarctl user <user> rotate_password.
The Web UI redesign is not included in this release. Linux amd64 and arm64 executables and SHA-256 checksums are attached.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Add
-
v0.1.10
Stablereleased this
2026-10-12 17:11:14 +02:00 | 145 commits to main since this releaseDavar v0.1.10
- Manage davarctl commands and options through Cobra, with shared help and shell
completion definitions and consistent global options across command depths. - Preserve established account/folder/message syntax, Unicode folder selectors,
legacy options and message flag operands. - Allow bounded variation between IMAP's advertised message size and the actual
MIME literal, with matching memory reservations and the existing 64 MiB cap. - Report actual and allowed byte counts when a MIME fetch exceeds its budget.
See README.md for commands and packaging/aur/davar-bin for Arch installation.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Manage davarctl commands and options through Cobra, with shared help and shell
-
v0.1.9
Stablereleased this
2026-10-12 13:25:40 +02:00 | 147 commits to main since this releasev0.1.9
This release improves synchronization of large IMAP folders.
Highlights
- Folder history is discovered through bounded numeric UID ranges. Sparse
folders skip empty UID prefixes while keeping each server response bounded. - Sync yields between UID pages and message batches, so other account work can
proceed during long scans. - Messages committed before a transient failure remain available and are reused
on retry. An incomplete final scan cannot remove cached messages or mark the
folder synchronized. - IMAP timeout errors identify the operation and UID range or message UID while
preserving the underlying network error for diagnostics. - Gmail's All Mail folder is recognized by the standard
\Allspecial-use
attribute, including when its displayed name is localized.
Static Linux binaries are provided for amd64 and arm64 with
SHA256SUMS.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Folder history is discovered through bounded numeric UID ranges. Sparse
-
v0.1.8
Stablereleased this
2026-10-11 23:02:06 +02:00 | 149 commits to main since this releasev0.1.8
This release expands Davar's embedded browser mail reader.
Highlights
- Desktop mail browsing now uses three panes for folders, messages, and reading;
smaller screens switch between the list and reader. - The UI uses the gazelle postage-stamp mark as its brand icon and favicon, with
Material icons on clear action buttons. - Keyboard navigation supports arrow and Vi-style movement, with a shortcut
guide and visible focus. - Versioned browser preferences remember theme, sidebar state, last location,
and per-folder list filters and sorting. Search text and mail contents are not
persisted in browser storage. - Authenticated folder SSE updates the visible list and counts. Optional browser
notifications report new messages observed while connected; reconnects do not
replay missed events. - Hebrew, Arabic, and CJK text remains direction-aware in the list and reader.
- Thread grouping remains deferred until the API provides stable conversation
identities.
Static Linux binaries are provided for amd64 and arm64 with
SHA256SUMS.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Desktop mail browsing now uses three panes for folders, messages, and reading;
-
v0.1.7
Stablereleased this
2026-10-11 20:26:30 +02:00 | 151 commits to main since this releasev0.1.7
This release adds international folder and message text support.
Highlights
-
Hebrew, Arabic and CJK folder names use exact Unicode in Davar, with modified
UTF-7 conversion at IMAP boundaries for discovery and mailbox operations. -
Message headers, bodies and attachment filenames decode common Hebrew,
Chinese, Japanese and Korean MIME encodings. -
Browser views isolate mixed-direction values and handle direction per message
paragraph while preserving whitespace. -
Plain-text account, message and Outbox tables account for wide CJK characters
and combining marks. -
An opt-in international E2E runner checks folders, SMTP self-delivery, CLI/JSON
output and browser rendering for Hebrew, Arabic, Chinese, Japanese and Korean.
Account addresses and credentials remain private runtime inputs. -
Normal daemon logs now show account creation, folder download progress and
listener readiness. Provider setup instructions cover Proton Bridge certificate
import/pinning and link to Google’s app password guide.
Static Linux binaries are provided for amd64 and arm64 with
SHA256SUMS.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
-
v0.1.6
Stablereleased this
2026-10-11 18:50:49 +02:00 | 154 commits to main since this releasev0.1.6
This release improves account sync status reporting.
Highlights
davarctl account listdisplays the actual latest sync error instead of a
genericerrorstatus.- Account list status now reflects the newest recorded automatic or manual sync
result, so a newer successful sync clears an older failure from the summary.
Static Linux binaries are provided for amd64 and arm64 with
SHA256SUMS.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.1.5
Stablereleased this
2026-10-11 17:51:31 +02:00 | 156 commits to main since this releasev0.1.5
This release adds live folder mail monitoring.
Highlights
davarctl account <ID> folder <FOLDER_ID> monitorstreams sender and subject
for messages newly stored while the subscription is connected.- The authenticated
GET /api/v1/account/{id}/folder/{folder}/eventsendpoint
uses server-sent events scoped to the account and folder. - Temporary disconnects reconnect without replaying events missed while
disconnected. Monitoring does not start synchronization.
Static Linux binaries are provided for amd64 and arm64 with
SHA256SUMS.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
-
v0.1.4
Stablereleased this
2026-10-11 17:07:36 +02:00 | 159 commits to main since this releasev0.1.4
This release improves account setup diagnostics and account status reporting.
Highlights
- Failed account connectivity checks print the full safe IMAP and SMTP errors,
including TLS certificate validation details. davarctl account listshows each account's cached synchronization status:
not synced,syncing,synced, orerror.- IMAP authentication errors distinguish server rejections from transport and
protocol failures, while omitting potentially sensitive server response text. - Missing account IDs in the update command show the correct syntax:
davarctl account <ID> update [flags].
Static Linux binaries are provided for amd64 and arm64 with
SHA256SUMS.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Failed account connectivity checks print the full safe IMAP and SMTP errors,