Select your language


15 Jul 2026

Bruno 3.5.2 Released!

Maintenance Indicator

Maintenance

  • Reverted to the previous code-signing certificate to restore trusted installs and updates on macOS.
  • Established a chain of trust for future releases on macOS, so signature verification continues to work even when the signing Team ID changes.
11 Jul 2026

Git 2.55.0.2 Released!

11 Jul 2026

Composer 2.10.2 Security Release!

Security release!

  • Security: Validate package names (GHSA-499r-g7pc-vmp9 / CVE-2026-59948)
  • Security: Validate package bin paths against path traversal (GHSA-gjfg-22fp-rrxx / CVE-2026-59946)
  • Security: Sanitize URL-embedded usernames/token in verbose output (GHSA-g6xq-892h-64w3 / CVE-2026-59947)
  • Security: Only follow HTTP redirects from HTTP responses (#12948)
  • Security: Prevent phar metadata unserialization on unsafe PHP versions (#12946)
  • Security: Sanitize JSON parse errors in http responses to avoid leaking response body data (#12959)
11 Jul 2026

Bruno 3.5.1 Released!

Bug Fixes
Fixed a leading | being added to multipart-form file paths on selection.
Fixed Git processes running continuously in the background, causing high memory usage for users working in Git repositories.

11 Jul 2026

Apache 2.4.68 Security Release!

Security release!

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

  • openssl 3.6.3
  • nghttp2 1.69.0
  • jansson 2.15.0
  • curl 8.20.0
  • apr 1.7.6
  • apr-util 1.6.3
  • apr-iconv 1.2.2
  • zlib 1.3.2
  • zstd 1.5.7
  • brotli 1.2.0
  • pcre2 10.47
  • libxml2 2.15.3
  • lua 5.5.0
  • expat 2.8.1
10 Jul 2026

Mailpit 1.30.4 Security Release!

Security release!

Security

Chore

  • Refactor browser storage settings for consistency (#715)
  • Update Go dependencies
  • Update node dependencies
  • Update caniemail test database
  • Update Github Action requirements

Fix

  • Exclude supported clients in HTML check results (#716)
09 Jul 2026

PHP 8.5.8, 8.4.23 & 8.3.32 SECURITY Release!

Security release!

  • OpenSSL:
    • Fixed bug GH-22187 (Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD). (CVE-2026-14355)
01 Jul 2026

Powershell 7.6.3 Released!

.NET Upgrade: Internal build tools have been updated to use .NET SDK 10.0.301.
Package Cleanup: The unused Publish-NugetToMyGet command has been removed from the internal packaging module.

18 Jun 2026

Mailpit 1.30.2 Security Release!

Security release!

Fix incomplete SSRF protection in IsInternalIP() detection for IPv6 transition mechanisms (GHSA-w4mc-hhc6-xp28)

Feature
Add wait support to readyz (axllent/mailpit#697)
Chore
Compress websocket messages once per broadcast to improve performance (axllent/mailpit#695)
Toggle websocket compression using HTTP compression setting (axllent/mailpit#695)
Update Github Actions dependencies
Update Go dependencies
Update node dependencies
Fix
Adjust header setting order in error response functions (axllent/mailpit#699)
Test
Add readyz tests

Our Supporters

Sorry, this website uses features that your browser doesn't support. Upgrade to a newer version of Firefox, Chrome, Safari, or Edge and you'll be all set.