• v0.1.13 66e11e6792

    v0.1.13
    All checks were successful
    CI / backend-test (push) Successful in 4m8s
    CI / webui-test (push) Successful in 1m19s
    Release / build-and-release (push) Successful in 1m11s
    Stable

    Ghost released this 2026-10-18 14:38:57 +02:00 | 97 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    Davar v0.1.13

    • Harden the browser UI: disable htmx script-tag/eval handling, and honor
      X-Forwarded-Proto: https from a loopback TLS-terminating proxy when setting
      the session cookie's Secure flag.
    • Bound the command-line event stream: a stalled SSE connection is cancelled
      after 90 seconds of silence (the daemon heartbeats every 20–30 seconds).
    • Cap Store.PutBlob at the 64 MiB MIME limit so no caller can write an
      unbounded blob.
    • Refactor the CLI: one resolveFolderRoute grammar drives dispatch and leaf
      help, account paths go through accountPath, and routine account/folder
      verbs are declared once and shared by dispatch, Cobra, and usage text.
    • Centralize account API path building in the REST handlers and web UI.
    • Run the Playwright web UI suite in Forgejo CI (with Go, Node, and Chromium),
      enforce a 65% total-coverage floor, and fix the suite's navigation-race
      teardown.
    • Add the code review report and clarify the original-styling CSS contract,
      userinfo URL handling, and folder unread shadowing behavior.
    • Refresh the AUR davar-bin package to v0.1.12 (now superseded by this
      release's assets).

    No breaking command or API changes. Linux amd64 and arm64 executables and
    SHA-256 checksums are attached. See README.md for commands and
    packaging/aur/davar-bin for Arch installation.

    Downloads
  • v0.1.12 8a223b6e11

    v0.1.12
    All checks were successful
    CI / backend-test (push) Successful in 4m45s
    Release / build-and-release (push) Successful in 1m19s
    Stable

    Ghost released this 2026-10-18 13:26:07 +02:00 | 114 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    Davar v0.1.12

    • Complete the embedded browser UI: responsive mailbox tree, message list
      controls, Ctrl/Shift and keyboard selection, hover summaries, bulk and
      context actions, move picker, and Trash/Spam restore.
    • Render sanitized HTML mail in a sandboxed reader with explicit remote-image
      consent, remembered per-sender choices, original-styling view, and Light,
      Dark, and System themes. Remote media defaults to never.
    • Add the virtual Unread view and davarctl account ACCOUNT_ID folder unread list, spanning cached Inbox and custom folders with source-folder reporting.
    • Add collection PATCH message actions (read, unread, star, unstar,
      trash, spam, restore, not_spam, move) and folder mark_read and
      rename endpoints.
    • Allow sending with Cc/Bcc recipients only, omitting an empty To header.
    • Include each message's stored MIME size in listings, with a rounded Size
      column in CLI tables.
    • Cache folder lists and the reader for faster navigation, print messages in an
      isolated view, and show non-selectable folder containers as group controls.
    • Reject duplicate active folder sync requests instead of queueing redundant
      work.

    Linux amd64 and arm64 executables and SHA-256 checksums are attached. See
    README.md for commands and packaging/aur/davar-bin for Arch installation.

    Downloads
  • v0.1.11 55c1b78bcb

    v0.1.11
    Some checks failed
    Release / build-and-release (push) Successful in 1m30s
    CI / backend-test (push) Has been cancelled
    Stable

    Ghost released this 2026-10-15 14:49:37 +02:00 | 142 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.11

    • Add GET /api/v1/user/me to identify the authenticated built-in user and role. Both full-access and read-only keys are supported; responses contain only id and role and are not cached.
    • Add GET /api/v1/user and davarctl user list to list existing built-in users and their roles.
    • Replace the previous key-rotation interface with PATCH /api/v1/user/{user} and davarctl user <user> rotate_password.

    The Web UI redesign is not included in this release. Linux amd64 and arm64 executables and SHA-256 checksums are attached.

    Downloads
  • v0.1.10 bf0e08c33e

    v0.1.10
    All checks were successful
    Release / build-and-release (push) Successful in 2m33s
    CI / backend-test (push) Successful in 7m14s
    Stable

    Ghost released this 2026-10-12 17:11:14 +02:00 | 145 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    Davar v0.1.10

    • Manage davarctl commands and options through Cobra, with shared help and shell
      completion definitions and consistent global options across command depths.
    • Preserve established account/folder/message syntax, Unicode folder selectors,
      legacy options and message flag operands.
    • Allow bounded variation between IMAP's advertised message size and the actual
      MIME literal, with matching memory reservations and the existing 64 MiB cap.
    • Report actual and allowed byte counts when a MIME fetch exceeds its budget.

    See README.md for commands and packaging/aur/davar-bin for Arch installation.

    Downloads
  • v0.1.9 d968c78cfc

    v0.1.9
    Some checks failed
    Release / build-and-release (push) Successful in 2m35s
    CI / backend-test (push) Has been cancelled
    Stable

    Ghost released this 2026-10-12 13:25:40 +02:00 | 147 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.9

    This release improves synchronization of large IMAP folders.

    Highlights

    • Folder history is discovered through bounded numeric UID ranges. Sparse
      folders skip empty UID prefixes while keeping each server response bounded.
    • Sync yields between UID pages and message batches, so other account work can
      proceed during long scans.
    • Messages committed before a transient failure remain available and are reused
      on retry. An incomplete final scan cannot remove cached messages or mark the
      folder synchronized.
    • IMAP timeout errors identify the operation and UID range or message UID while
      preserving the underlying network error for diagnostics.
    • Gmail's All Mail folder is recognized by the standard \All special-use
      attribute, including when its displayed name is localized.

    Static Linux binaries are provided for amd64 and arm64 with SHA256SUMS.

    Downloads
  • v0.1.8 245b9763b9

    v0.1.8
    Some checks failed
    Release / build-and-release (push) Successful in 2m41s
    CI / backend-test (push) Has been cancelled
    Stable

    Ghost released this 2026-10-11 23:02:06 +02:00 | 149 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.8

    This release expands Davar's embedded browser mail reader.

    Highlights

    • Desktop mail browsing now uses three panes for folders, messages, and reading;
      smaller screens switch between the list and reader.
    • The UI uses the gazelle postage-stamp mark as its brand icon and favicon, with
      Material icons on clear action buttons.
    • Keyboard navigation supports arrow and Vi-style movement, with a shortcut
      guide and visible focus.
    • Versioned browser preferences remember theme, sidebar state, last location,
      and per-folder list filters and sorting. Search text and mail contents are not
      persisted in browser storage.
    • Authenticated folder SSE updates the visible list and counts. Optional browser
      notifications report new messages observed while connected; reconnects do not
      replay missed events.
    • Hebrew, Arabic, and CJK text remains direction-aware in the list and reader.
    • Thread grouping remains deferred until the API provides stable conversation
      identities.

    Static Linux binaries are provided for amd64 and arm64 with SHA256SUMS.

    Downloads
  • v0.1.7 45e0f458b1

    v0.1.7
    All checks were successful
    Release / build-and-release (push) Successful in 2m47s
    CI / backend-test (push) Successful in 7m56s
    Stable

    Ghost released this 2026-10-11 20:26:30 +02:00 | 151 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.7

    This release adds international folder and message text support.

    Highlights

    • Hebrew, Arabic and CJK folder names use exact Unicode in Davar, with modified
      UTF-7 conversion at IMAP boundaries for discovery and mailbox operations.

    • Message headers, bodies and attachment filenames decode common Hebrew,
      Chinese, Japanese and Korean MIME encodings.

    • Browser views isolate mixed-direction values and handle direction per message
      paragraph while preserving whitespace.

    • Plain-text account, message and Outbox tables account for wide CJK characters
      and combining marks.

    • An opt-in international E2E runner checks folders, SMTP self-delivery, CLI/JSON
      output and browser rendering for Hebrew, Arabic, Chinese, Japanese and Korean.
      Account addresses and credentials remain private runtime inputs.

    • Normal daemon logs now show account creation, folder download progress and
      listener readiness. Provider setup instructions cover Proton Bridge certificate
      import/pinning and link to Google’s app password guide.

    Static Linux binaries are provided for amd64 and arm64 with SHA256SUMS.

    Downloads
  • v0.1.6 a4f3be8631

    v0.1.6
    Some checks failed
    Release / build-and-release (push) Successful in 2m35s
    CI / backend-test (push) Has been cancelled
    Stable

    Ghost released this 2026-10-11 18:50:49 +02:00 | 154 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.6

    This release improves account sync status reporting.

    Highlights

    • davarctl account list displays the actual latest sync error instead of a
      generic error status.
    • Account list status now reflects the newest recorded automatic or manual sync
      result, so a newer successful sync clears an older failure from the summary.

    Static Linux binaries are provided for amd64 and arm64 with SHA256SUMS.

    Downloads
  • v0.1.5 ee9a10cac8

    v0.1.5
    Some checks failed
    Release / build-and-release (push) Successful in 2m15s
    CI / backend-test (push) Has been cancelled
    Stable

    Ghost released this 2026-10-11 17:51:31 +02:00 | 156 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.5

    This release adds live folder mail monitoring.

    Highlights

    • davarctl account <ID> folder <FOLDER_ID> monitor streams sender and subject
      for messages newly stored while the subscription is connected.
    • The authenticated GET /api/v1/account/{id}/folder/{folder}/events endpoint
      uses server-sent events scoped to the account and folder.
    • Temporary disconnects reconnect without replaying events missed while
      disconnected. Monitoring does not start synchronization.

    Static Linux binaries are provided for amd64 and arm64 with SHA256SUMS.

    Downloads
  • v0.1.4 ade00b3cb7

    v0.1.4
    Some checks failed
    Release / build-and-release (push) Successful in 2m39s
    CI / backend-test (push) Has been cancelled
    Stable

    Ghost released this 2026-10-11 17:07:36 +02:00 | 159 commits to main since this release

    Signed by ozzt
    GPG key ID: 35441C4ED2E53204

    v0.1.4

    This release improves account setup diagnostics and account status reporting.

    Highlights

    • Failed account connectivity checks print the full safe IMAP and SMTP errors,
      including TLS certificate validation details.
    • davarctl account list shows each account's cached synchronization status:
      not synced, syncing, synced, or error.
    • IMAP authentication errors distinguish server rejections from transport and
      protocol failures, while omitting potentially sensitive server response text.
    • Missing account IDs in the update command show the correct syntax:
      davarctl account <ID> update [flags].

    Static Linux binaries are provided for amd64 and arm64 with SHA256SUMS.

    Downloads