maddy 0.5.2

== Bug fixes

* Correctly apply Read Timeout to implicit TLS handshake
* auth/shadow: Remove support for MD5-based hashes
* check/spf: Print "deferred" message only if SPF check failed

maddy 0.5.1

== Bug fixes

* table/sql_table: Fix incorrect for PostgreSQL type being used in table creation (GH foxcpp#386)
* endpoint/smtp: Fix limitedReader causing message body read to loop forever (GH foxcpp#403, GH foxcpp#389)
* storage/blob/s3: Fix PutObject goroutines leaking if message write is aborted (GH foxcpp#395)
* storage/blob/s3: Force a smaller PartSize when blob size is unknown (GH foxcpp#395)
* storage/blob: Pass blobSize to go-imap-sql (GH foxcpp#395)
* storage/blob/s3: Correctly handle PutObject errors (GH foxcpp#387)

== Misc

* libdns: Add namecheap provider (GH foxcpp#392)

Added only if maddy is built with Go 1.16.

* Add postmaster address rewrite back to default config (GH foxcpp#384)

maddy 0.5.0

== New features

* Experimental: Built-in ACME client (GH foxcpp#3)

Currently supports only dns-01 challenge with a limited set of
providers. See documentation for details.

* S3-backed storage for message contents (GH foxcpp#304)

* Local sender authorization (GH foxcpp#268)

* LDAP BindDN authentication (GH foxcpp#273)

* storage/imapsql: Implement auth_map
* storage/imapsql: Implement delivery_map

This functionality allows imapsql storage backend to be correctly
used with non-email-based authentication providers.
In particular, this unbreaks PAM and shadow modules.

* Implement table.chain module

* Implement table.email_localpart as a helper to strip domain from emails

== Improvements

* Implement client timeouts for target.remote and target.smtp
* endpoint/smtp: Add max_header_size

== Fixes

* check/spf: Change default action for softfail to 'ignore'
* endpoint/smtp: Allow to change the line length limit enforced by go-smtp
* table/sql_query: Allow to use numbered parameters in queries
* auth/plain_separate: Make configuration directives actually work
* table/file: Allow table to be created without specifying files in inline args
* config/tls: Fix custom loader configuration reading

== Removed functionality

* check/dns: Mark require_matching_echo as deprecated
* config/tls: Remove deprecated "tls CERT KEY" syntax
* Remove deprecated 0.3 module name aliases

== maddy 0.4.4

> *The* long awaited release!

=== Outbound SMTP

* target/remote: Force MX domain to be FQDN when looking up TLSA records (GH foxcpp#321)
* Fix two issues in handling of DSN messages in SMTP pipeline and checks (GH foxcpp#327)
* dns: Attempt to use 127.0.0.1 if no DNS servers are configured in system
* target/queue: Do not attempt to do atomic overwrite for metadata on Windows (GH foxcpp#334)

=== Inbound SMTP

* endpoint/smtp: Unbreak `MAIL FROM:<>` handling (GH foxcpp#337)
* endpoint/smtp: Release Msg limiter correctly if pipeline.Start fails (GH foxcpp#348)

=== Misc

* config/tls: Fix tls_client parsing (Thanks @AluisioASG!)

=== Documentation

* docs: Replace foxcpp.dev/maddy with maddy.email
* docs: Remove reference to local_modifiers from multiple-domains.md
* docs: fixed small error (Thanks @0xflotus!)
* Fix a typo in maddy-smtp man doc (Thanks @Defman21!)

=== Docker

This release changes how Docker image is built reverting default directories
behavior to what 0.4.2 did but implemented in a different way so we have
the best of both worlds.

Docker users no longer have to specify config path while using maddyctl.

=== build.sh

* Allow setting build tags
* Do not try to install man pages if they were not built

=== 3rd party libraries

* go-smtp now uses Postfix success responses
* go-msgauth/dkim now supports both RSA public key formats
  (see emersion/go-msgauth#43)

maddy 0.4.3

=== SMTP server

- Auto-buffer code no longer truncates large messages;
- DANE implementation has been rewritten from scratch to fix many issues;
  Thanks @vdukhovni!
- Domains in envelope addresses and EHLO are now always treated as FQDN to
  avoid quirks when system has search domains configured;
- target.lmtp no longer attempts to use STARTTLS by default;
- allow_body_subset directive has been removed from check.dkim code since it is
  no longer supported upstream;
- A bug has been fixed in the DKIM canonicalization code that caused some
  messages to be signed or verified incorrectly (go-msgauth issue);
- Fix target.lmtp actually acting as target.smtp when defined in a top-level
  config; Thanks @reivilibre!

=== IMAP server

- HZ-GB-2312 encoding collation support is reenabled. Upstream security issue
  has been fixed;

=== build.sh

build.sh script has been replaced with a much more simple implementation
that works with any POSIX shell and is more portable in general.

Thanks @Binklebonk, @hugmouse and @herbygillot for helping testing it on
non-Linux platforms.

=== Misc

- All uses of deprecated 0.3 module names have been replaced with up-to-date
  names;

=== Documentation

- Dovecot integration tutorial has been updated to avoid circular dependency in
  startup; Thanks @reivilibre!
- All uses of deprecated 0.3 module names have been replaced with up-to-date
  names; Thanks @reivilibre for spotting some of them!

maddy 0.4.2

== Fixes

* check/milter: Add missing handler for milter.ActTempFail ('t')
* msgpipeline: Fix log messages missing for sub-pipelines
* msgpipeline: Fix effective_rcpt in log messages being wrong when sub-pipelines do rewriting
* endpoint/smtp: Fix handling of empty messages in auto-buffer code
* endpoint/smtp: Auto-create directory for "fs" buffer mode

maddy 0.4.1

== Fixes

* check/rspamd: Fix sending of message header leading to incorrect results.

* check/milter, auth/plain_separate are now actually usable.

* address: Fix some addresses being incorrectly considered to be invalid (foxcpp#275)

maddy 0.4.0

== GPLv3

After short discussion and collecting necessary agreements, decision was
made to change Maddy Mail Server source code license to GNU Public
License Version 3.

See GH#253 for details.

== Deprecated functionality, breaking changes for 0.5

Work is being done to stabilize maddy interfaces including configuration
format and all data structures. Therefore, since 0.4, development
strictly follows Semantic Versioning 2, in particular - all breaking
changes are announced in advance as "deprecated" before actual change
happens. Therefore, this version does not include any breaking changes
but 0.5 will.

* A lot of modules have been renamed to match "namespaced" modules
  proposal. Warning with correct names will be printed on start
  with config using old names.

* STARTTLS Everywhere list support is deprecated and is replaced with
  no-op stub.

* TLS certificate loading has been moved to use modules framework.
  "tls CERT KEY" will need to be changed to "tls file CERT KEY".

== New features

* Expose performance and usage statistics in OpenMetrics
  (Prometheus) format. See openmetrics.md.

* Allow external commands to be used for overwriting IMAP folder and
  flags on delivery. See GH#202 and maddy-imap(5) for details.

* Directly integrate with rspamd using its HTTP protocol
  instead of shell script + rspamc.

* Reuse SMTP connections to MXs to avoid unnecessary handshake overhead
  when sending a lot of messages to a single domain.
   (experimental)

* Implement server-side SNI support - multiple certificate-key pairs can
  be specified with "file" loader.

== Enhancements

* Implement SMTP REQUIRETLS extension

* imapsql: Implement SORT and THREAD=ORDEREDSUBJECT extensions
  (experimental)

* endpoint/imap: Implement NAMESPACE extension

* imapsql: Fix flags-only search returning duplicate IDs (GH#251)

* msgpipeline: Permit duplicate destination/source rules

* table: Allow using regexp table without replacement specified

* build.sh: Add ability to set build tags

* build.sh: Add sudo checks (thanks @hugmouse!)

* check/spf: Make sure error value from library is always reported in logs

* config/tls: Remove unnecesary GODEBUG setting code

== Bug fixes

* imapsql: Improve meta-data loading perfomance for Thunderbird by properly
  caching X-Priority field

* Fix SPF policy parser bug resulting in false permerror on some ip6 rules (foxcpp#254)

* storage/imapsql: Fix incorrect module name in log messages related to delivery errors

== Documentation

* Add page on Mailman 3 integration

* Add page on rspamd integration

* Split maddy(1) and maddy(5)

* Improve setting-up.md (thanks @schrodinger)

* Remove fail2ban from initial configuration

* Clarify configuration for multiple domains

maddy 0.3.3

== Bug fixes

* Fix CRLF mangled into LF by net/textproto and incorrect RFC822.SIZE reported
  by go-imap-sql as a result of that.
    (18657de)

* Fix maddyctl imap-msgs list showing only the last message by default
    (b2b38bf)

* Fix attachments reported as 0 bytes
    (fb2b3a5)

* Fix messages listed twice by RainLoop
    (abba516)

* Fix maddyctl creds set-password being no-op
    (78f7713)

* Mangle CRLF in Diagnostic-Code DSN field
    (18657de, see GH#245)

* Add missing msg_id field for 'RCPT error' message
    (20fe5ad)

* Fix SMTP enhanced code included in extra lines of multi-line SMTP status
    (18657de)

== Misc

* Hide "operation was canceled" errors for async rDNS lookup
    (fcebfa2)

maddy 0.3.2

== SECURITY ISSUES

* Update golang.org/x/text to v0.3.3 (fixes potential DoS)

See CVE-2020-14040 and https://go-review.googlesource.com/c/text/+/238238
for details.

== Bug fixes

For imapsql IMAP backend:
* Fix handling of * seqset
* Add missing counters update for EXPUNGE
  Thanks @yesnomaybeyes for helping in issue investigation.
* Do not assume clients specify date in APPEND command
* Fix creating index on MySQL (foxcpp/go-imap-sql#31)
  Thanks @wjywbs.

== Documentation changes

* Extend copyright notice to include contributors
* Fix formatting and fix possibly confusing MTA-STS example
* Fix wrong name of 'targets' directive for smtp_downstream

== Misc

* build.sh: Do not switch to X.Y-fixes branch if version is manually selected
* dist: Add missing [Install] section to systemd units