Messaging is a patch-and-govern week: self-hosted servers fixed security gaps while admin and agent controls tightened.
The week in communication-messaging
No spark-level launches this week, so the story is maintenance with consequences. Self-hosted mail and chat projects shipped security fixes and licensing corrections, and the hosted products added admin and agent-facing controls.
The common thread is operators getting more visibility and fewer surprises, even where the changes arrive as breaking releases.
Leaders
mailcow shipped its November release with a fix for a remote code execution flaw exploitable by admins and domain admins, mailbox groups, and an imapsync rework with breaking changes. The October update had already moved PHP, SOGo and Nginx for security.
Rocket.Chat patched 8.9 LTS with load fixes from 9.0, including notifications that no longer pause every 100 sends, plus a security hotfix. Its 9.0 candidate switches off features of a removed license for connected users without a reload.
Slack released CLI 4.13, which tells coding agents running help about the Slack MCP server and Skills plugin. It also tightened Marketplace review by dropping apps that meet low-usage criteria.
Superhuman added Admin Tools on every plan, bringing seats, roles, security and billing into one panel, and an Enterprise activity page that counts MCP clients.
Subsplash made Dashboard Home a single view across its church products, with live cards for People, Giving, Events, Groups, Workflows and Forms, and added a notes timeline to workflow cards.
Wildcards
Fonoster started charging for calls on Fonoster Cloud as the project moves to fonoster.ai, followed by a release listing agent calls in a new tab. A commercial turn for an open voice stack.
Misskey previewed a 2026.11 alpha with a start script cutting memory by 70 to 140 MB, after a 2026.10 release with an HTTP Signatures fix.
Themes that compounded
- Security fixes at mailcow, Rocket.Chat and Misskey.
- Admin visibility at Superhuman and Subsplash.
- Agents being pointed at official tooling, as in Slack.
- Pricing and gatekeeping tightening at Fonoster and Slack.
Watch this week
Rocket.Chat's 9.0 candidate has been through several release candidates in a short window, so a final 9.0 is the next thing to watch. mailcow users should expect questions about the imapsync breaking changes, and Fonoster's billing launch should produce further cleanup releases.