What’s new in Warmbly.
New features, improvements and fixes, in the order they reached production. Each one links to the change on GitHub, so nothing here is rewritten after the fact.
The full log. Every entry, by month.
November 2026
- Nov 1New
Gate private TLS recovery archives with an opt-in scoped writer
New Features. Added an optional, disabled-by-default role for securely uploading TLS recovery evidence to designated storage locations. It grants upload-only access and does not enable recovery.. Changes to this role or its permissions require infrastructure approval.. Documentation. Added guidance on configuring the…
#1118 - Nov 1New
Gate partial TLS cleanup with reviewed evidence and protected recovery
New Features. Added a reviewed, manual workflow for partial TLS recovery, with safeguards and checks before and after recovery.. The workflow can archive private recovery evidence and redeploy the planned release before final verification.. Deployment workflows can accept an optional bake duration override.…
#1117 - Nov 1New
Validate TLS recovery resource and workflow evidence
Recovery identity/state/plan, lineage and S3 input fixture suites passed.. Mocked collection covers wrong identity/version/hash/encryption, changed latest state, wrong deployment/stage, historical release relabeling, changed tag/ancestry, incomplete jobs, API failures and overwrite refusal.. Existing normal TLS…
#1116 - Nov 1New
Require complete HTTP group cleanup in scoped runtime TLS plans
Documentation. Updated TLS finalization guidance to require a plan that removes exactly four service HTTP target groups.. Clarified that a partially completed transition requires a separately reviewed recovery plan.. Bug Fixes. TLS plan checks now reject plans that omit or alter any of the four expected target-group…
#1115 - Nov 1New
Keep visible mailbox health aligned with current server evidence
New Features. Mailbox health and error reports refresh every minute, when you return to the tab, and when relevant live events occur.. Cached measurements remain visible as “Last observed” during refreshes or failed reads. Recent issues remain labeled “Last reported issue” for up to five minutes while recovery is…
#1114 - Nov 1New
Align realtime loopback HTTP listener socket family
Bug Fixes. Fixed HTTP listener configuration for IPv4 loopback addresses, improving local connections while preserving existing transport and protocol options.
#1113 - Nov 1New
Hide temporary mailbox failures on working mailboxes and explain warmup skipping persona off-days
New Features. The Warmup tab identifies warmup days skipped because they fall outside your sending schedule. If you can manage email settings, you can add those days to the schedule from the notice.. Recoverable mailbox warnings show Retrying while automatic retries are underway. Critical errors continue to show…
#1112 - Nov 1New
Declare runtime TLS stage choices as YAML strings
Chores. Updated the formatting of stage choices in the release workflow configuration. The available choices remain route, drain, and on; no options or user-facing behavior have changed. This is a configuration-only adjustment, with no new features, changes to existing functionality, or other end-user-visible updates.
#1111 - Nov 1New
Compare retained runtime TLS registrations with canonical optional ELB names
Bug Fixes. TLS deployment plan checks now treat an empty load-balancer name consistently with an unspecified name, preventing valid drain-stage plans from being rejected.. Checks continue to reject plans when key load-balancer settings, container details, or target-group information differ between stages.
#1110 - Nov 1New
Require release provenance for reusable AWS deployments
New Features. Deployment workflows can now configure whether release image provenance checks are required. These checks remain enabled by default.. Security. Runtime TLS redeployments now require release image attestations.
#1109 - Nov 1New
Describe POST /auth/me/password/link, GET /auth/me/identities, DELETE /auth/me/identities/{provider} and the Unibox overview drafts count in openapi.json and the Unibox reference
New Features. Added account options to request a single-use password-setting link and view or remove linked sign-in methods. Links expire after one hour. Removing a method may require fresh confirmation, is unavailable if it would leave the account without another sign-in method, and may fail if sessions cannot be…
#1108 - Nov 1New
Keep Cloud mailbox readings independent while other reports are pending
Improvements. Mailbox health and activity now show when readings are last observed, helping distinguish current status from cached information.. Cloud mailbox status refreshes every minute and when you return to the page. Recent issues remain visible until recovery is confirmed.. Daily sent counts and sorting reflect…
#1085
October 2026
- Oct 31New
Stage runtime TLS routing with compatible fallback and drain gates
New Features. Runtime TLS upgrades can now progress through separate routing, draining, and activation stages. Traffic can move to HTTPS while HTTP fallback resources remain available, then those resources are removed after registrations have drained.. The rollout process checks service health, release consistency…
#1105 - Oct 31New
Finalize runtime TLS with a scoped plan and infrastructure approval
Finalize the both to on runtime TLS stage through a manual workflow restricted to main and the protected infrastructure approval environment. The plan and apply jobs read the same versioned private configuration snapshot, verify HTTPS target health and the live release, and require the complete resource changes to…
#1104 - Oct 31New
Raise x/net, follow-redirects, seroval and libz-sys to their patched releases
Chores. Updated underlying JavaScript and Go dependencies to newer patch and minor versions.
#1102 - Oct 31New
Move provider-created accounts to email sign-in and manage linked sign-in methods from Settings > Security
New Features. View linked Google, Apple, and single sign-on methods in Security settings, including when they were linked and last used.. Remove a linked sign-in method after confirming your identity. You can’t remove your last available sign-in method, and other sessions using the removed method are signed out.. If…
#1099 - Oct 31New
Node credentials and assignment scope, initial-only issued passwords, opt-in service TLS, and sign-in hardening
New Features. Sign-in now guides users with an issued initial password through choosing a replacement before continuing. These passwords expire within 48 hours.. Authorized administrators can reissue initial passwords for tester accounts; each password is shown once and must be changed at first sign-in.. Services can…
#1098 - Oct 31New
Recover unknown-outcome send holds automatically and replace the provider-confirmation mailbox message
New Features. Campaign send isolation is now enabled by default and can be disabled explicitly.. Uncertain send holds can clear automatically: sends that never started are released after 30 minutes, while eligible started sends are released after 10 minutes without being retried.. Campaign sends with an uncertain…
#1097 - Oct 31New
Show pending agent replies alongside mailbox drafts in Unibox
New Features. The Drafts folder now includes pending inbox-agent replies, shown before mailbox-saved drafts. Its count includes both types and counts each conversation only once.. Agent replies are also available in the conversation and through the Agent drafts filter.. Bug Fixes. Drafts results refresh after an agent…
#1087 - Oct 31New
Read interest in German, French and Spanish replies for workspaces that choose those tagging languages
This is the positive half of #1037 for German, French and Spanish. It's the separate PR you asked for, reviewed against a stricter must-not-match corpus. An offline positive in these languages now behaves exactly like an English one: it takes the replypositive branch and counts as an interested lead. No new analytics…
#1074 - Oct 30New
Shorten hosted worker observation windows and recover image-pull startup failures
New Features. AWS worker rollouts now wait for a configurable healthy-uptime period at each stage, defaulting to five minutes.. Fleet startup automatically retries confirmed container image-pull failures up to twice, with 30- and 60-second delays.. Documentation. Updated AWS deployment guidance to explain rollout…
#1096 - Oct 30New
Let a workspace confirm its main website with its _warmbly TXT record so redirects can point there, and redesign the Redirect tab as a step checklist
Owndomain.Resolver counts confirmed websites alongside mailbox domains, verified tracking hosts and the verified forms domain. Everything else about the rule is unchanged: save refuses an unconfirmed destination with redirecttargetnotowndomain, and serving checks the allowlist on every lookup.. The record lives on the…
#1095 - Oct 30New
Report every PostgreSQL live test in advisory CI before enforcing coverage
Tests. Automated validation now includes live integration tests using PostgreSQL and Redis. Results are summarized by package and test, with failed, skipped, or missing results highlighted for review. These checks are advisory and do not block the overall CI result. The test summary is also available as a downloadable…
#1094 - Oct 30New
Natural undisclosed warmup threads with a built-in library and recency-based rotation
New Features. Warmup now uses a built-in library of everyday email conversations and can continue without an AI provider. When enabled, AI-generated conversations can supplement the library.. Conversation selection prioritizes threads neither mailbox has seen in the past 30 days, then favors the least recently seen…
#1093
Try what just shipped.
Start free on Warmbly Cloud, or pull the latest release and run it on your own server.