Sending an email is one line of code. Getting it delivered is a whole discipline, and Gmail keeps moving the goalposts.
Nette Mail 4.2.0 brings what the big providers demand today: OAuth 2.0, one-click unsubscribe, modern DKIM. Update and nothing breaks.
Joined January 2009
- Your AI agent is only as good as your types. All of Nette now passes PHPStan at level 8 – not parts, not with exceptions, the whole framework. And why that matters more than ever in the age of agents:
- End of CSRF cookies. Nette Http 3.4 switches protection from a cookie to Sec-Fetch headers. And it brings a new API: the isFrom() method lets you declare where a request may come from – and unlike the old cookie, it can tell same-origin from same-site.
- A user’s avatar. An image preview in a comment. A URL sent by your AI. Whenever your PHP app fetches a URL it didn’t pick itself, it’s an SSRF target. One of the OWASP Top 10. Nette 3.4 fixes it in a single line.

