recipe-maintainers/mailu
0
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

chore: upgrade mailu to 2024.06.64 #9

Open
autonomic-bot wants to merge 1 commits from upgrade-69afb87 into main
pull from: upgrade-69afb87
merge into: :main
Conversation 2 Commits 1 Files Changed 1
+6 -6
autonomic-bot commented 2026-10-16 03:16:37 +00:00
Owner
Copy Link
Copy Source

mailu image upgrade: 2024.06.61 → 2024.06.64

Bumps all six mailu services lockstep on one tag (mailu ships every service from the same version
code). redis (8.10.2-alpine) and ldez/traefik-certs-dumper (v2.11.4) are already current — unchanged.

service image current → new
app ghcr.io/mailu/nginx 2024.06.61 → 2024.06.64
admin ghcr.io/mailu/admin 2024.06.61 → 2024.06.64
imap ghcr.io/mailu/dovecot 2024.06.61 → 2024.06.64
smtp ghcr.io/mailu/postfix 2024.06.61 → 2024.06.64
antispam ghcr.io/mailu/rspamd 2024.06.61 → 2024.06.64
webmail ghcr.io/mailu/webmail 2024.06.61 → 2024.06.64
db redis 8.10.2-alpine (unchanged)
certdumper ldez/traefik-certs-dumper v2.11.4 (unchanged)

Upstream changes (2024.06.61 → 2024.06.64)

  • 2024.06.62 (2026-10-12): deal with the DNS KSK rollover, ensure it does not happen again.
  • 2024.06.63 (2026-10-13): resolver healthcheck now fails on SERVFAIL from unbound instead of
    reporting healthy while every lookup fails.
  • 2024.06.64 (2026-10-15, latest): same resolver-healthcheck fix re-released.
  • No migrations, no breaking changes, no config/env/volume/label changes. Patch-level bug fixes only.

Upstream release notes: app/admin/imap/smtp/antispam/webmail (mailu) 2024.06.61→2024.06.64: https://github.com/Mailu/Mailu/releases/tag/2024.06.64
(and https://github.com/Mailu/Mailu/releases/tag/2024.06.63 , https://github.com/Mailu/Mailu/releases/tag/2024.06.62)

Security / advisory scan

Deterministic advisory-scan.py mailu --from 2024.06.61 --to 2024.06.64 → 0 CVEs fixed by this
upgrade; union with release-note reading = 0. (Roundcube CVEs CVE-2026-54432/54433 were already
fixed at 2024.06.56; CVE-2026-62356 concerns redis, unchanged here.) Note the scan's GitHub-advisory
sources were rate-limited, so the count is a floor — release notes name no CVEs for .62–.64.

Operator Action Required

None. No config or migration changes.

Release command (operator, after merge)

abra recipe release mailu -z

The recipe version label is intentionally not bumped in this PR — the operator runs the release
command above (which bumps the label + tags + publishes) after the upstream PR merges.

Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review.

cc @trav @notplants

## mailu image upgrade: 2024.06.61 → 2024.06.64 Bumps all six mailu services lockstep on one tag (mailu ships every service from the same version code). `redis` (8.10.2-alpine) and `ldez/traefik-certs-dumper` (v2.11.4) are already current — unchanged. | service | image | current → new | |---------|-------|---------------| | app | ghcr.io/mailu/nginx | 2024.06.61 → 2024.06.64 | | admin | ghcr.io/mailu/admin | 2024.06.61 → 2024.06.64 | | imap | ghcr.io/mailu/dovecot | 2024.06.61 → 2024.06.64 | | smtp | ghcr.io/mailu/postfix | 2024.06.61 → 2024.06.64 | | antispam | ghcr.io/mailu/rspamd | 2024.06.61 → 2024.06.64 | | webmail | ghcr.io/mailu/webmail | 2024.06.61 → 2024.06.64 | | db | redis | 8.10.2-alpine (unchanged) | | certdumper | ldez/traefik-certs-dumper | v2.11.4 (unchanged) | ### Upstream changes (2024.06.61 → 2024.06.64) - **2024.06.62** (2026-10-12): deal with the DNS **KSK rollover**, ensure it does not happen again. - **2024.06.63** (2026-10-13): resolver healthcheck now **fails on SERVFAIL** from unbound instead of reporting healthy while every lookup fails. - **2024.06.64** (2026-10-15, latest): same resolver-healthcheck fix re-released. - No migrations, no breaking changes, no config/env/volume/label changes. Patch-level bug fixes only. **Upstream release notes:** app/admin/imap/smtp/antispam/webmail (mailu) 2024.06.61→2024.06.64: https://github.com/Mailu/Mailu/releases/tag/2024.06.64 (and https://github.com/Mailu/Mailu/releases/tag/2024.06.63 , https://github.com/Mailu/Mailu/releases/tag/2024.06.62) ### Security / advisory scan Deterministic `advisory-scan.py mailu --from 2024.06.61 --to 2024.06.64` → **0 CVEs fixed by this upgrade**; union with release-note reading = 0. (Roundcube CVEs CVE-2026-54432/54433 were already fixed at 2024.06.56; CVE-2026-62356 concerns redis, unchanged here.) Note the scan's GitHub-advisory sources were rate-limited, so the count is a floor — release notes name no CVEs for .62–.64. ### Operator Action Required None. No config or migration changes. ### Release command (operator, after merge) ``` abra recipe release mailu -z ``` The recipe version label is intentionally **not** bumped in this PR — the operator runs the release command above (which bumps the label + tags + publishes) after the upstream PR merges. Tested green on the cc-ci recipe CI server (full suite, cold, against this PR head). NOT merged — for operator review. cc @trav @notplants
autonomic-bot added 1 commit 2026-10-16 03:16:38 +00:00
chore: upgrade mailu to 2024.06.64
cc-ci/testme cc-ci: success
Details
69afb8706b
autonomic-bot requested review from trav 2026-10-16 03:16:38 +00:00
autonomic-bot requested review from notplants 2026-10-16 03:16:38 +00:00
autonomic-bot commented 2026-10-16 03:17:17 +00:00
Author
Owner
Copy Link
Copy Source

!testme

!testme
autonomic-bot commented 2026-10-16 03:17:46 +00:00
Author
Owner
Copy Link
Copy Source

🌻 cc-ci — mailu @ 69afb870 ✅ passed

cc-ci result card

level

full logs · dashboard

<!-- cc-ci:testme --> 🌻 **cc-ci** — `mailu` @ `69afb870` ✅ **passed** [![cc-ci result card](https://ci.autonomic.zone/runs/62/summary.png)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/62) [![level](https://ci.autonomic.zone/runs/62/badge.svg)](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/62) [full logs](https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/62) · [dashboard](https://ci.autonomic.zone/)
All checks were successful
cc-ci/testme cc-ci: success
Details
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin upgrade-69afb87:upgrade-69afb87
git checkout upgrade-69afb87
Sign in to join this conversation.
Reviewers
No Reviewers
trav
notplants
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/mailu#9