This is the stable release of the next major version 1.7 of Roundcube Webmail.
After almost four years of development we introduce a few breaking changes, some new features, and bring support for recent PHP versions. With automated code style and quality checks, removed code bloat and updated dependencies, we hope for even more codebase quality.
Some noteworthy changes are:
- Mandatory public_html/ entry-point for HTTP servers, protecting all installations better.
- Improved OAuth2/OIDC support (e.g. support for OIDC discovery, OIDC logout).
- Markdown mail rendering and composing.
- A quick actions mouse-over menu on the messages list.
- Advanced mail search syntax.
Breaking Changes:
- Dropped support for PHP < 8.1.
- Dropped support for Internet Explorer.
- Dropped support for MS SQL Server and Oracle.
- public_html/ entry-point made mandatory, all static resources are served via public_html/static.php.
- Removed apc cache driver (replaced by apcu cache driver).
- Changed smtp_log option default value to false.
- Removed contact_search_name option in favor of contactlist_name_template.
- Replaced session property changed by expires_at.
- Removed the (insecure) virtualmin password driver.
This release is considered stable and we encourage you to update your productive installations after carefully testing the upgrade scenario. Download it from roundcube.net (https://roundcube.net/download).
With the release of Roundcube 1.7.0, the previous stable release branch 1.6.x changes into an LTS (low maintenance) mode which means it will only receive important security updates. The 1.5.x series is no longer supported and maintained.
See the full changelog in the release notes (https://github.com/roundcube/roundcubemail/releases/tag/1.7.0) on the Github download page, but don't forget about previous release canditate and beta releases.
Source: https://roundcube.net/news/2026/05/10/roundcube-1.7.0-released
Get it Now: https://roundcube.net/download