Release Modoboa 2.9.0
May 29, 2026 — Christophe Chauvet
Modoboa 2.9.0 is now available!
We’re excited to announce the release of Modoboa 2.9.0, packed with improvements, new plugins system, security updates
Key Changes and Improvements
Enhancements
- Plugin System: Introduced an enhanced plugin system for better extensibility.
- Customization: Added the ability to customize logos directly from the user interface.
- Authentication: Fixed authentication page styling to ensure consistent color schemes.
- Email Handling: Allowed the use of email addresses in rule/filter names.
- Password Reset: Corrected the URL in password reset emails.
- Calendar: Fixed an issue with ICS file uploads in the Calendar feature.
Security
- Vulnerability Fix: Addressed an IDOR (Insecure Direct Object Reference) vulnerability in the change password API endpoint.
Documentation
- Added lifecycle information and an OpenAPI generator for improved API documentation.
- Documented MariaDB support in the README.
Dependencies Updates
- Updated multiple frontend and backend dependencies, including:
- Django (5.2.13 → 5.2.14)
- Fido2 (2.1.1 → 2.2.0)
- Caldav (3.1.0 → 3.2.0)
- Axios (1.13.5 → 1.15.2)
- Node.js (frontend now supports Node 22)
- PostCSS, Vitepress, and other packages.
- Updated multiple frontend and backend dependencies, including:
Localization
- Updated translations for Japanese (ja_JP) and French (fr) locales.
New Contributor
- @robertsilen GitHub contributed by documenting MariaDB support.
Miscellaneous Fixes
- Fixed issues related to empty email handling and documentation build processes.