Skip to content

build(deps): bump nodemailer from 10.0.1 to 10.0.7 - #447

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodemailer-10.0.7
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodemailer-10.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps nodemailer from 10.0.1 to 10.0.7.

Release notes

Sourced from nodemailer's releases.

v10.0.7

10.0.7 (2026-09-11)

Bug Fixes

  • mime-funcs: do not double encode Buffer input when chunking base64 mime words (#1865) (4327a59)
  • mime-node: keep a boundary that is only line breaks from stripping to empty (ec46800)
  • mime-node: strip line breaks from multipart boundary material (#1867) (03c1a5c)
  • smtp-pool: release rate-limited connections on close (#1866) (7f5c7a4)

v10.0.6

10.0.6 (2026-09-11)

Bug Fixes

  • addressparser: scan free text for an address in linear time (437d7fc)

v10.0.5

10.0.5 (2026-09-11)

Bug Fixes

  • addressparser: parse comment-joined addresses in linear time (c07f175)

v10.0.4

10.0.4 (2026-09-11)

Bug Fixes

  • fetch: scope a cookie without a Path to the RFC 6265 default path (2f907cb)
  • fetch: send cookies set with Path back to the exact path (#1861) (d557113)
  • mail-composer: keep httpHeaders and tls for href alternatives and icalEvent (#1862) (7f502be)
  • resolve well-known services by their primary domains (#1859) (085f525)
  • ses-transport: throw a configuration error when the SES client is missing (#1863) (4d9c4c9)

v10.0.3

10.0.3 (2026-09-10)

Bug Fixes

  • fetch: honor the cookie Domain attribute without accepting public suffixes (1608391), closes #1856

v10.0.2

10.0.2 (2026-09-09)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.0.10 (2026-09-14)

Bug Fixes

  • derive the attachment filename from the basename of a Windows path (c7cc7ce)
  • dkim: unfold folded header lines in linear time (28a5909)
  • smtp-connection: reassemble multiline replies in linear time (f2d82fa)

10.0.9 (2026-09-12)

Bug Fixes

  • addressparser: bound the '@' probe to the run being scanned (1465c3f)
  • addressparser: keep the text after a comment out of a quoted local part address (2f36eb1)

10.0.8 (2026-09-11)

Bug Fixes

  • mime-node: clean the boundary where it is written, not only where it is built (e14278d)
  • mime-node: drop every control character from multipart boundary material (a82a355)

10.0.7 (2026-09-11)

Bug Fixes

  • mime-funcs: do not double encode Buffer input when chunking base64 mime words (#1865) (4327a59)
  • mime-node: keep a boundary that is only line breaks from stripping to empty (ec46800)
  • mime-node: strip line breaks from multipart boundary material (#1867) (03c1a5c)
  • smtp-pool: release rate-limited connections on close (#1866) (7f5c7a4)

10.0.6 (2026-09-11)

Bug Fixes

  • addressparser: scan free text for an address in linear time (437d7fc)

10.0.5 (2026-09-11)

Bug Fixes

  • addressparser: parse comment-joined addresses in linear time (c07f175)

10.0.4 (2026-09-11)

... (truncated)

Commits
  • 29166ff chore(master): release 10.0.7 (#1869)
  • ec46800 fix(mime-node): keep a boundary that is only line breaks from stripping to empty
  • c838561 test(mime-funcs): pin Buffer and string mime words to the same output
  • 4327a59 fix(mime-funcs): do not double encode Buffer input when chunking base64 mime ...
  • fb5d244 test(mail-composer): pin the boundary injection path reachable from mail data
  • 03c1a5c fix(mime-node): strip line breaks from multipart boundary material (#1867)
  • dcf2f4e test(smtp-pool): wait on the limiter release instead of sleeping
  • 7f5c7a4 fix(smtp-pool): release rate-limited connections on close (#1866)
  • 933d263 chore(master): release 10.0.6 (#1868)
  • 437d7fc fix(addressparser): scan free text for an address in linear time
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 10.0.1 to 10.0.7.
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.1...v10.0.7)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #449.

@dependabot dependabot Bot closed this Sep 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/nodemailer-10.0.7 branch September 21, 2026 17:33

This branch had an error being deployed

1 failed deployment
test — ee99aa14 Deployed Sep 14, 2026 by dependabot[bot] via define-env #1312
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants