---
scope: org
organization: resend
release_count: 55
last_release: 2026-10-08
generated: 2026-04-21
updated: 2026-10-09
canonical: https://releases.sh/resend/overview.md
---

Recently shipped a security fix to the MCP server, inbox preview support for reply-all and idempotency keys, and a guard against `email export` deleting project files.

**MCP no longer reads arbitrary local files.** v2.25.0 restricts which local files the `send-email` and `create-contact-import` tools can read.

**Inbox previews gained reply-all, idempotency keys, and agent settings.** Node preview builds added reply-all on thread replies, idempotency keys on inbox sending methods, and get/update for agent settings.

**`email export` can no longer wipe your project.** In `react-email@6.11.1`, pointing `--outDir` at the project, home directory, email templates, or static assets used to delete them; it now leaves them alone. `<Markdown>` also applies `markdownCustomStyles.th` to table header cells, which were previously styled as `td`.

**SDK correctness fixes across Go, Python, and Node.** Go preserves JSON bodies across 307 and 308 redirects and keeps the base URL path prefix on broadcast requests. Python's `Webhooks.verify` raises `ValueError` on non-ASCII signatures instead of failing obscurely. Node forwards received email as raw bytes rather than re-decoding it as UTF-8.

**Topics and usage stay reachable from every SDK.** Webhook event constants for `topic` and `contact.topics.updated`, and usage/quota lookups, remain available across the Node, Python, Go, and MCP SDKs.