LoginSign Up
← Back to all sparks
I

ITFlow

SUPPORT
Velocity2.5

Open-source IT documentation, ticketing and billing platform for MSPs.

itflow.org ↗

ITFlow ships a dated release every month, and spent 2026 rebuilding its mail plumbing.

mspticketingit-documentationinvoicingoauth2monthly-releases
◆Current state
ITFlow runs an MSP business on one stack — tickets, clients, assets, networks, documents, invoicing and payments — and cuts a CalVer release almost every month. The July 2026 release replaced the Webklex IMAP library with IMAPEngine and rewrote the mail settings page around Microsoft 365 and Google OAuth2, including which licensed user the connection runs as. Recent months have also made asset statuses, note types and rack types into user-editable categories, and added network import.
◆Where it's heading
Two threads run through these releases. One is grinding the email path into something reliable for an MSP: a new ticket parser, subject-based auto-merge, CC'd recipients becoming watchers, and now a library swap and OAuth2 rewrite. The other is steadily converting hardcoded enumerations into things administrators can edit. Underneath both, the project keeps migrating raw queries to prepared statements and adding CSRF checks release by release.
◆Prediction
The monthly cadence and the run of security fixes in the July notes point to another dated release in August continuing the prepared-statement and CSRF cleanup. Whether the IMAPEngine migration is finished or still shedding bugs is not visible from these entries.

◆Recent moves

  1. 27d ago

    v26.07 swaps the IMAP library and rewrites Microsoft 365 and Google OAuth2 setup

    The mail path gets rebuilt: Webklex is replaced by IMAPEngine and the settings page is rewritten around Microsoft 365 and Google OAuth2, down to specifying which licensed user the connection uses. The rest is security fixes and interface tidying, including keeping the configured theme in the client section.

    View source ↗
  2. 2mo ago

    v26.05: Stripe saved cards, project load time, dependency bumps

    A thin month — a saved-card fix on the client portal, an optimized ticket and task count that speeds up project loading, nightly expiry of password reset tokens, and library bumps. Nothing that changes what the product does.

    View source ↗
  3. 3mo ago

    v26.04 makes asset statuses and note types user-editable categories

    Asset status, network interface type, note type, software type and rack type all move into categories that administrators can create and edit, and networks gain an import. A batch of API repairs — clearer errors, no more 500s on unclean re-inserts — comes alongside.

    View source ↗
  4. 4mo ago

    v26.03 ties quotes to tickets and adds email CC'd people as watchers

    Quotes can now be associated with a ticket, and anyone CC'd on the email that opened a ticket is added as a watcher — both close gaps in how work arrives from email. Client screens get bulk net-terms actions and a denser overview.

    View source ↗
  5. 5mo ago

    v26.02 adds an approval gate on ticket tasks

    Ticket tasks gain an approval system: once approval is requested, the task cannot be marked complete until it is granted. The remainder is a long fix list spanning login flow, MFA, invoice export and audit logging.

    View source ↗
  6. 7mo ago

    v25.12 merges Files and Documents, auto-merges replies into open tickets

    Files and Documents are consolidated into one section, and email that matches an open ticket's subject by 95% within seven days is merged automatically instead of opening a duplicate. It also fixes a race that let parallel API calls issue the same ticket or invoice number.

    View source ↗