encryption4all · github-actions · Jul 30, 2026
diff --git a/.changeset/shared-mime-reader.md b/.changeset/shared-mime-reader.md
diff --git a/apps/outlook-addon/CHANGELOG.md b/apps/outlook-addon/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.0.1
+
+### Patch Changes
+
+- Updated dependencies [5fd30b7]
+  - @e4a/pg-js@2.4.0
+
 ## 1.0.0
 
 Built and released from the `postguard-js` monorepo, against the workspace copy of `@e4a/pg-js`. Releases are tagged `outlook-addin-v*` and managed by changesets; release-please is gone.

diff --git a/apps/outlook-addon/manifest.xml b/apps/outlook-addon/manifest.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:mailappor="http://schemas.microsoft.com/office/mailappversionoverrides/1.0" xsi:type="MailApp">
   <Id>149e61a5-f295-4bcd-be3a-1a6114166f26</Id>
-  <Version>1.0.0.0</Version>
+  <Version>1.0.1.0</Version>
   <ProviderName>PostGuard</ProviderName>
   <DefaultLocale>en-US</DefaultLocale>
   <DisplayName DefaultValue="PostGuard"/>

diff --git a/apps/outlook-addon/package.json b/apps/outlook-addon/package.json
@@ -1,6 +1,6 @@
 {
   "name": "postguard-outlook-addin",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "private": true,
   "description": "PostGuard end-to-end email encryption for Outlook (new Outlook on Windows + macOS).",
   "license": "MIT",

diff --git a/apps/tb-addon/CHANGELOG.md b/apps/tb-addon/CHANGELOG.md
@@ -1,5 +1,12 @@
 # postguard-tb-addon
 
+## 0.9.5
+
+### Patch Changes
+
+- Updated dependencies [5fd30b7]
+  - @e4a/pg-js@2.4.0
+
 ## 0.9.4
 
 ### Patch Changes

diff --git a/apps/tb-addon/manifest.json b/apps/tb-addon/manifest.json
@@ -1,6 +1,6 @@
 {
   "manifest_version": 3,
-  "version": "0.9.4",
+  "version": "0.9.5",
   "name": "__MSG_appName__",
   "description": "End-to-end email encryption using identity-based encryption and Yivi",
   "default_locale": "en",

diff --git a/apps/tb-addon/package.json b/apps/tb-addon/package.json
@@ -1,6 +1,6 @@
 {
   "name": "postguard-tb-addon",
-  "version": "0.9.4",
+  "version": "0.9.5",
   "private": true,
   "description": "PostGuard encryption extension for Thunderbird",
   "scripts": {

diff --git a/apps/tb-addon/updates.json b/apps/tb-addon/updates.json
@@ -64,6 +64,15 @@
               "strict_min_version": "128.0"
             }
           }
+        },
+        {
+          "version": "0.9.5",
+          "update_link": "https://github.com/encryption4all/postguard-js/releases/download/tb-addon-v0.9.5/postguard-tb-addon-0.9.5.xpi",
+          "applications": {
+            "gecko": {
+              "strict_min_version": "128.0"
+            }
+          }
         }
       ]
     }

diff --git a/apps/website/CHANGELOG.md b/apps/website/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.8.3
+
+### Patch Changes
+
+- Updated dependencies [5fd30b7]
+    - @e4a/pg-js@2.4.0
+
 ## 1.8.2
 
 ### Patch Changes

diff --git a/apps/website/package.json b/apps/website/package.json
@@ -1,6 +1,6 @@
 {
     "name": "postguard-website",
-    "version": "1.8.2",
+    "version": "1.8.3",
     "private": true,
     "engines": {
         "node": ">=20"

diff --git a/packages/pg-js/CHANGELOG.md b/packages/pg-js/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @e4a/pg-js
 
+## 2.4.0
+
+### Minor Changes
+
+- 5fd30b7: Export the MIME reader, PostGuard detection and the archival armor readers, so both add-ins read the envelope through one implementation instead of two hand-rolled copies.
+
+  New exports: `parseDecryptedMime`, `readMimeHeader`, `bodyFromMime`, `isMultipart`, `detectPostGuard`, `extractArmoredCiphertext`, `looksLikeArmoredPostGuard`, `POSTGUARD_ENCRYPTED_FILENAME`, and the `ParsedMessage` / `ParsedAttachment` / `DetectPostGuardInput` types. Additive only — no existing signature changes.
+
+  Two fixes came out of the move:
+
+  - **Quoted-printable bodies with non-ASCII characters were decoded wrong.** Each `=XX` was mapped through `String.fromCharCode`, giving one character per octet, so `caf=C3=A9` read back as `cafÃ©` rather than `café`. The byte path compounded it by re-encoding that as UTF-8, doubling every octet above 0x7f and silently corrupting quoted-printable attachments. Octets are now collected and decoded once.
+  - `extractCiphertext`'s documentation claimed it read "attachment or armored body". It has only ever read the attachment. The armor path is now a separate, explicitly archival export, which is what `COMPATIBILITY.md`'s never-drops guarantee for stored artifacts actually requires.
+
 ## 2.3.4
 
 ### Patch Changes

diff --git a/packages/pg-js/package.json b/packages/pg-js/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@e4a/pg-js",
-  "version": "2.3.4",
+  "version": "2.4.0",
   "type": "module",
   "sideEffects": false,
   "description": "Browser SDK for PostGuard — end-to-end encrypted file sharing with identity-based encryption",