Issues

• auth: full wforce integration — parity with Dovecot 2.4 auth_policy

  authenhancementsecurity
  yarilomail/yarilo#2317 · Filter by author 0kaba0hub opened on Oct 21, 2026

• testing: meet the awesome-go inclusion rules (coverage ≥ 80%, pkg.go.dev doc comments, published coverage report)

  documentationtesting
  yarilomail/yarilo#2316 · Filter by author 0kaba0hub opened on Oct 20, 2026

• security: a private channel for vulnerability reports (SECURITY.md, GitHub reporting, HackerOne Community Edition)

  enhancement
  yarilomail/yarilo#2105 · Filter by author 0kaba0hub opened on Oct 2, 2026
  3

• Phase JMAP-6: extensions backlog — Blob Management, Sharing, MDN

  jmapphase
  yarilomail/yarilo#965 · Filter by author 0kaba0hub opened on Aug 2, 2026

• Phase FTS-4: Bleve v2/scorch engine — pure-Go exact-match engine stream

  ftsphase
  yarilomail/yarilo#733 · Filter by author 0kaba0hub opened on Jul 22, 2026

• fts: implement explicit_prefix (prefixsplat) and wb5a — deferred until Bleve/tr29

  enhancementfts
  yarilomail/yarilo#732 · Filter by author 0kaba0hub opened on Jul 22, 2026

• Phase JMAP-5: push — EventSource, WebSocket (RFC 8887), PushSubscription (Web Push)

  jmapphase
  yarilomail/yarilo#714 · Filter by author 0kaba0hub opened on Jul 22, 2026
  2

• Phase AUTH-5: SASL EXTERNAL (certificate-based auth) — phased plan

  authphase
  yarilomail/yarilo#615 · Filter by author 0kaba0hub opened on Jul 17, 2026

• Phase AUTH-7 remainder: ldap, pam, lua, imap passdb/userdb drivers

  authphase
  yarilomail/yarilo#558 · Filter by author 0kaba0hub opened on Jul 15, 2026

• Phase ACL: Other Users namespace + NS-3 cross-pod routing (B3)

  aclphase
  yarilomail/yarilo#544 · Filter by author 0kaba0hub opened on Jul 15, 2026
  5

• feat(imap): URLAUTH + BURL (RFC 4467 / RFC 4468)

  enhancementimap
  yarilomail/yarilo#393 · Filter by author 0kaba0hub opened on Jul 2, 2026

• Phase REPL-1: mailbox replication (dsync)

  phasestorage
  yarilomail/yarilo#249 · Filter by author 0kaba0hub opened on Jun 14, 2026

• Phase OBOX-1: object-storage mailbox backend (S3/blob)

  phasestorage
  yarilomail/yarilo#247 · Filter by author 0kaba0hub opened on Jun 14, 2026

• Phase AUTH-5: missing SASL mechs — EXTERNAL, CRAM-MD5, GSSAPI

  authphase
  yarilomail/yarilo#245 · Filter by author 0kaba0hub opened on Jun 14, 2026