Dovecot Cluster Controller

Changes

• DOV-7273: HOST_LOAD_BALANCE_MIN_COOL_TIME_SECS has been renamed to HOST_LOAD_BALANCE_GROUP_MIN_COOL_TIME_SECS.
• DOV-7274: GROUP_BALANCE_GROUP_SIZE_SLACK_PERCENT has been renamed to GROUP_BALANCE_GROUP_SIZE_RATIO_SLACK.
• DOV-7382: Limit cluster controller container privileges even further and make root filesystem read-only.

Improvements

• DOV-7150: DryRun mode is changing from a global flag to per-feature configuration, allowing granular control over which specific features operate. This enhancement enables more precise testing and debugging by isolating feature behavior without impacting other functionalities.
• DOV-7352: Cluster controller now support custom CA, authentication and client certificates for cassandra connections.

Dovecot

Removed Items

• DOV-7331: Azure storage shared key authentication has been removed.

Improvements

• DOV-7291: Added new %\{local_port\} and %\{remote_port\} variables to mail logging.

Fixed Issues

• DOV-7257: fs-s3: Bulk deletes didn't contain the maximum number of bulk delete requests when used with fs-dictmap.
• DOV-7272: doveadm auth command may crash if aborted with a signal at the same time as when the auth finishes.
• DOV-7287: obox: Fix storage-objectid-migrate-index.sh fts object migration.
• DOV-7297: IMAP NOTIFY may have crashed if dovecot.list.index.log was rotated rapidly enough.
• DOV-7301: Mailbox list index rebuild didn't always detect duplicate folder names, causing the mailboxes to be lost.
• DOV-7309: ManageSieve SSL connections may have started hanging in some situations before login.
• DOV-7334: FETCHing a partial message following a lone CR (without a following LF character) causes corruption error.
  • Fixes: Deleting corrupted cache record: Broken virtual size in mailbox .. FETCH BODY... got too little data
• DOV-7347: Failing to connect to userdb/master auth socket can cause a crash in some places.
  • Fixes: "doveadm user": Panic: file auth-master.c: line 440 (auth_master_unset_io): assertion failed: (conn->to == NULL)
• DOV-7455: If backend was removed, users could no longer login. Instead, Lua exception would be raised.
• DOV-7456: Azure FS driver was leaking memory. v3.0.1 regression.
• DOV-7502: OpenSSL 3 lib-dcrypt can cause SSL connection failure
• DOV-7508: Wildcards didn't work in local_name *.example.com { .. }. v3.0 regression.