🔖(minor) release version 0.3.0

Added
- Add configurable help center button in header #537
- Add outbound message recipients throttling #506
- Add webhook and logging for selfchecks, replacing pushgateway #550
- Add mailbox export in mbox format with labels #553
- Add PST import support and streaming for mbox #544
- Add denylist for personal mailbox prefixes #540
- Add multi-column layout block for signature editor #551
- Add celery task events for worker monitoring #549
- Add image block in template, signature and message composers
- Add storage usage metrics API endpoint #538
- Add conditional outbox folder
- Add stronger DNS checks with configurable records #522
- Add print button in messages context menu #518
- Add autofocus option to message, template and signature composers
- Add arm64 platform support for Docker image builds #554

Changed
- Replace queue-based save/send orchestration with async promise ref
- Use display_name for labels and auto-unfold active parents #547
- Optimize MessageTemplate serialization and body handling #545
- Defer HTML/text body export to send/save time
- Add composer tools (text color, side menu and drag block handle)
- Improve outbox wording #539
- Replace nginx with Caddy for frontend reverse proxy and Scalingo deployment #556
- Replace MinIO with RustFS for object storage in development #556
- Migrate Python packaging from Poetry to uv #556
- Standardize and rename Makefile targets #556
- Remove Django i18n and backend translation catalogs #556

Fixed
- Delete orphan attachments when removed from draft #532
- Fix cursor position when clicking in combobox input #534
- Close left panel when clicking active folder on mobile
- Close thread after send only if needed

Security
- Prevent IDOR on ThreadAccess thread and mailbox fields #557
- Add defense in-depth for XSS vulnerabilities #520

Author: jbpenrath

CHANGELOG.md

@@ -8,19 +8,53 @@ and this project adheres to
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-02-24
+
 ### Added
 
-- Add arm64 platform support for Docker image builds
+- Add configurable help center button in header #537
+- Add outbound message recipients throttling #506
+- Add webhook and logging for selfchecks, replacing pushgateway #550
+- Add mailbox export in mbox format with labels #553
+- Add PST import support and streaming for mbox #544
+- Add denylist for personal mailbox prefixes #540
+- Add multi-column layout block for signature editor #551
+- Add celery task events for worker monitoring #549
+- Add image block in template, signature and message composers
+- Add storage usage metrics API endpoint #538
+- Add conditional outbox folder
+- Add stronger DNS checks with configurable records #522
+- Add print button in messages context menu #518
+- Add autofocus option to message, template and signature composers
+- Add arm64 platform support for Docker image builds #554
+
 ### Changed
 
-- Bump keycloak to 26.5.3 #543
+- Replace queue-based save/send orchestration with async promise ref
+- Use display_name for labels and auto-unfold active parents #547
+- Optimize MessageTemplate serialization and body handling #545
+- Defer HTML/text body export to send/save time
+- Add composer tools (text color, side menu and drag block handle)
+- Improve outbox wording #539
 - Replace nginx with Caddy for frontend reverse proxy and Scalingo deployment #556
 - Replace MinIO with RustFS for object storage in development #556
 - Migrate Python packaging from Poetry to uv #556
 - Standardize and rename Makefile targets #556
 - Upgrade Python to 3.14 #556
 - Remove Django i18n and backend translation catalogs #556
 
+### Fixed
+
+- Delete orphan attachments when removed from draft #532
+- Fix cursor position when clicking in combobox input #534
+- Close left panel when clicking active folder on mobile
+- Close thread after send only if needed
+
+### Security
+
+- Prevent IDOR on ThreadAccess thread and mailbox fields #557
+- Add defense in-depth for XSS vulnerabilities #520
+
 ## [0.2.0] - 2026-02-03
 
 ### Added
@@ -75,7 +109,8 @@ and this project adheres to
 - Exclude `is_trashed` and `is_spam` threads from search results by default
 - `to` search modifier now looks for messages where recipient fields (to, cc, bcc) contain the given email address.
 
-[unreleased]: https://github.com/suitenumerique/messages/compare/v0.2.0...main
+[unreleased]: https://github.com/suitenumerique/messages/compare/v0.3.0...main
+[0.3.0]: https://github.com/suitenumerique/messages/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/suitenumerique/messages/releases/v0.2.0
 [0.1.1]: https://github.com/suitenumerique/messages/releases/v0.1.1
 [0.1.0]: https://github.com/suitenumerique/messages/releases/v0.1.0

src/backend/pyproject.toml

@@ -4,7 +4,7 @@
 
 [project]
 name = "messages-backend"
-version = "0.2.0"
+version = "0.3.0"
 authors = [{ "name" = "ANCT", "email" = "[email protected]" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",

src/e2e/package.json

@@ -1,7 +1,7 @@
 {
   "name": "st-messages-e2e",
   "private": true,
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "End-to-end tests for Messages application",
   "engines": {
     "node": ">=22.0.0 <23.0.0",

src/frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "st-messages",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "private": true,
   "type": "module",
   "engines": {

src/mta-in/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "uv_build"
 
 [project]
 name = "st-messages-mta-in"
-version = "0.2.0"
+version = "0.3.0"
 authors = [{ "name" = "ANCT", "email" = "[email protected]" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",

src/mta-out/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "uv_build"
 
 [project]
 name = "st-messages-mta-out"
-version = "0.2.0"
+version = "0.3.0"
 authors = [{ "name" = "ANCT", "email" = "[email protected]" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",