What appwrite/appwrite shipped
Generated by FoxPlug from public activity — not affiliated with Appwrite.
Week of September 14, 2026
What shipped
- Appwrite now includes a native MQTT 5.0 push broker as a self-hosted alternative to FCM, allowing devices to connect, authenticate with JWT or session, and receive push messages. Pull request #13372
- Email verification and password recovery now support OTP-based flows with four new Account API endpoints, removing the need for web redirects or deep linking in mobile apps. Pull request #13677
- A password-pwned project policy was added to check passwords against the Have I Been Pwned breach database and reject breached passwords with HTTP 400. Pull request #13702
- Redis cache payloads are now stored using the igbinary codec instead of JSON for improved performance. Pull request #13732
- Execution duration now consistently reports wall clock time across all trigger paths, including cold start. Pull request #13754
- Jaspr SSR framework support was added, reusing the flutter-3.44 runtime image. Pull request #13710
- The Bus library was moved to packages/bus as the second step of absorbing Utopia libraries into the monorepo. Pull request #13700
- ID token sessions now only offer Apple and Google as valid OAuth providers instead of all 52 providers. Pull request #13759
- Deployments are now published as ready only after they are executable, preventing clients from fetching empty deploymentIds. Pull request #13741
- SMTP connections are now pooled and reused across concurrent mail sends instead of creating new connections per send. Pull request #13722
Why it matters
This week brings significant additions to authentication and push infrastructure with OTP email verification, native MQTT push support, and password security checks. Performance improvements across caching and SMTP, plus continued monorepo consolidation of Utopia libraries, strengthen the platform's core capabilities.
Changelog entry
- Appwrite Native MQTT Push Broker: Self-hosted MQTT 5.0 push broker with device authentication via JWT or session Pull request #13372
- OTP Support: Email verification and password recovery now support OTP-based flows with four new Account API endpoints Pull request #13677
- Password Pwned Policy: New password-pwned project policy checks against Have I Been Pwned breach database Pull request #13702
- Cache Codec: Redis cache payloads now stored with igbinary codec for improved performance Pull request #13732
- Execution Duration: Wall clock time now reported consistently across all execution trigger paths Pull request #13754
- Jaspr Framework: Added SSR adapter support reusing flutter-3.44 runtime Pull request #13710
- ID Token Sessions: Restricted to Apple and Google OAuth providers only Pull request #13759
- Deployment Ready State: Deployments published as ready only after becoming executable Pull request #13741
- SMTP Pooling: Concurrent mail sends now share pooled SMTP connections Pull request #13722
- Monorepo: Bus library absorbed into packages/bus with full dependency management Pull request #13700
New in Appwrite: OTP-based email verification and password recovery for mobile apps, native MQTT push broker alternative to FCM, password-pwned detection, Redis igbinary caching, and pooled SMTP connections.
This week's Appwrite updates focus on authentication improvements and performance: OTP support for email verification and password recovery eliminates web redirects for mobile; a native MQTT 5.0 push broker offers self-hosted FCM alternative; password-pwned checking blocks breached passwords; Redis caching switches to igbinary codec; SMTP connections are pooled for efficiency; and the monorepo consolidation continues absorbing Utopia libraries.