Weekly cc-ci upgrade: bump all six mailu images 2024.06.52 → 2024.06.55 — patch series within the 2024.06 stable line (security + bugfix). Redis (8.8.0-alpine) and traefik-certs-dumper (v2.11.4) unchanged.
None — patch-level bugfix/security releases within the same 2024.06 stable line. No DB migrations, no compose/config/env changes (only image tags moved). Recipe README only calls out work for major updates.
Recommended release
The version label is intentionally left untouched in this PR (publishing is the operator final step). After merge, publish with: abra recipe release mailu -z
(patch/security → -z → 3.1.2+2024.06.55)
Verification (step 2b direct deploy)
Deployed dev-mailu on the cc-ci swarm at the upgrade tree (all images 2024.06.55). Core services healthy on the new tag: admin (alembic migrations OK), antispam/rspamd, imap/dovecot v2.3.21.1, smtp/postfix 3.9.11, redis ready. app/webmail hit a pre-existing dev-environment TLS-cert limitation (no traefik acme cert for the dev domain) that affects them identically on 2024.06.52 and 2024.06.55 — not a regression. Real-CI verdict via !testme below.
Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
Weekly cc-ci upgrade: bump all six mailu images 2024.06.52 → 2024.06.55 — patch series within the `2024.06` stable line (security + bugfix). Redis (8.8.0-alpine) and traefik-certs-dumper (v2.11.4) unchanged.
| service | image | old | new |
|---|---|---|---|
| app (front) | ghcr.io/mailu/nginx | 2024.06.52 | 2024.06.55 |
| admin | ghcr.io/mailu/admin | 2024.06.52 | 2024.06.55 |
| imap | ghcr.io/mailu/dovecot | 2024.06.52 | 2024.06.55 |
| smtp | ghcr.io/mailu/postfix | 2024.06.52 | 2024.06.55 |
| antispam | ghcr.io/mailu/rspamd | 2024.06.52 | 2024.06.55 |
| webmail | ghcr.io/mailu/webmail | 2024.06.52 | 2024.06.55 |
**Upstream release notes** (https://github.com/Mailu/Mailu/releases):
- app/admin/imap/smtp/antispam/webmail 2024.06.52→2024.06.55: https://github.com/Mailu/Mailu/releases/tag/2024.06.55 — security: ensure `X-Forwarded-By` is set (GHSA-rfhj-4wcq-74xg)
- 2024.06.54: https://github.com/Mailu/Mailu/releases/tag/2024.06.54 — fix admin-UI forced-password-change redirect + Create-User form-flow
- 2024.06.53: https://github.com/Mailu/Mailu/releases/tag/2024.06.53 — fix vacation (auto-reply) sieve injection via display-name escaping
### Operator Action Required
None — patch-level bugfix/security releases within the same `2024.06` stable line. No DB migrations, no compose/config/env changes (only image tags moved). Recipe README only calls out work for *major* updates.
### Recommended release
The version label is intentionally left untouched in this PR (publishing is the operator final step). After merge, publish with:
`abra recipe release mailu -z`
(patch/security → `-z` → `3.1.2+2024.06.55`)
### Verification (step 2b direct deploy)
Deployed `dev-mailu` on the cc-ci swarm at the upgrade tree (all images 2024.06.55). Core services healthy on the new tag: admin (alembic migrations OK), antispam/rspamd, imap/dovecot v2.3.21.1, smtp/postfix 3.9.11, redis ready. `app`/`webmail` hit a **pre-existing dev-environment** TLS-cert limitation (no traefik acme cert for the dev domain) that affects them identically on 2024.06.52 and 2024.06.55 — not a regression. Real-CI verdict via `!testme` below.
Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
cc @trav @notplants
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Weekly cc-ci upgrade: bump all six mailu images 2024.06.52 → 2024.06.55 — patch series within the
2024.06stable line (security + bugfix). Redis (8.8.0-alpine) and traefik-certs-dumper (v2.11.4) unchanged.Upstream release notes (https://github.com/Mailu/Mailu/releases):
X-Forwarded-Byis set (GHSA-rfhj-4wcq-74xg)Operator Action Required
None — patch-level bugfix/security releases within the same
2024.06stable line. No DB migrations, no compose/config/env changes (only image tags moved). Recipe README only calls out work for major updates.Recommended release
The version label is intentionally left untouched in this PR (publishing is the operator final step). After merge, publish with:
abra recipe release mailu -z(patch/security →
-z→3.1.2+2024.06.55)Verification (step 2b direct deploy)
Deployed
dev-mailuon the cc-ci swarm at the upgrade tree (all images 2024.06.55). Core services healthy on the new tag: admin (alembic migrations OK), antispam/rspamd, imap/dovecot v2.3.21.1, smtp/postfix 3.9.11, redis ready.app/webmailhit a pre-existing dev-environment TLS-cert limitation (no traefik acme cert for the dev domain) that affects them identically on 2024.06.52 and 2024.06.55 — not a regression. Real-CI verdict via!testmebelow.Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.
cc @trav @notplants
!testme
🌻 cc-ci —
mailu@e7f4b8d8✅ passedfull logs · dashboard
chore: upgrade mailu to 2024.06.53to chore: upgrade mailu to 2024.06.54!testme
🌻 cc-ci —
mailu@6b3b891b✅ passedfull logs · dashboard
chore: upgrade mailu to 2024.06.54to chore: upgrade mailu to 2024.06.55!testme
🌻 cc-ci —
mailu@164736e6✅ passedfull logs · dashboard
!testme
🌻 cc-ci —
mailu@164736e6✅ passedfull logs · dashboard
Auto-closed by /recipe-upgrade: its changes are already in upstream main (merged upstream); mirror main re-synced
Pull request closed