Skip to content

Bump nodemailer from 9.1.0 to 10.0.7 - #82

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodemailer-10.0.7
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodemailer-10.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps nodemailer from 9.1.0 to 10.0.7.

Release notes

Sourced from nodemailer's releases.

v10.0.7

10.0.7 (2026-09-11)

Bug Fixes

  • mime-funcs: do not double encode Buffer input when chunking base64 mime words (#1865) (4327a59)
  • mime-node: keep a boundary that is only line breaks from stripping to empty (ec46800)
  • mime-node: strip line breaks from multipart boundary material (#1867) (03c1a5c)
  • smtp-pool: release rate-limited connections on close (#1866) (7f5c7a4)

v10.0.6

10.0.6 (2026-09-11)

Bug Fixes

  • addressparser: scan free text for an address in linear time (437d7fc)

v10.0.5

10.0.5 (2026-09-11)

Bug Fixes

  • addressparser: parse comment-joined addresses in linear time (c07f175)

v10.0.4

10.0.4 (2026-09-11)

Bug Fixes

  • fetch: scope a cookie without a Path to the RFC 6265 default path (2f907cb)
  • fetch: send cookies set with Path back to the exact path (#1861) (d557113)
  • mail-composer: keep httpHeaders and tls for href alternatives and icalEvent (#1862) (7f502be)
  • resolve well-known services by their primary domains (#1859) (085f525)
  • ses-transport: throw a configuration error when the SES client is missing (#1863) (4d9c4c9)

v10.0.3

10.0.3 (2026-09-10)

Bug Fixes

  • fetch: honor the cookie Domain attribute without accepting public suffixes (1608391), closes #1856

v10.0.2

10.0.2 (2026-09-09)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.0.7 (2026-09-11)

Bug Fixes

  • mime-funcs: do not double encode Buffer input when chunking base64 mime words (#1865) (4327a59)
  • mime-node: keep a boundary that is only line breaks from stripping to empty (ec46800)
  • mime-node: strip line breaks from multipart boundary material (#1867) (03c1a5c)
  • smtp-pool: release rate-limited connections on close (#1866) (7f5c7a4)

10.0.6 (2026-09-11)

Bug Fixes

  • addressparser: scan free text for an address in linear time (437d7fc)

10.0.5 (2026-09-11)

Bug Fixes

  • addressparser: parse comment-joined addresses in linear time (c07f175)

10.0.4 (2026-09-11)

Bug Fixes

  • fetch: scope a cookie without a Path to the RFC 6265 default path (2f907cb)
  • fetch: send cookies set with Path back to the exact path (#1861) (d557113)
  • mail-composer: keep httpHeaders and tls for href alternatives and icalEvent (#1862) (7f502be)
  • resolve well-known services by their primary domains (#1859) (085f525)
  • ses-transport: throw a configuration error when the SES client is missing (#1863) (4d9c4c9)

10.0.3 (2026-09-10)

Bug Fixes

  • fetch: honor the cookie Domain attribute without accepting public suffixes (1608391), closes #1856

10.0.2 (2026-09-09)

Bug Fixes

  • mime-node: flatten nested recipient arrays without recursion (ebe0849)
  • shared: keep the TLS server name out of the DNS cache (a6512db)

... (truncated)

Commits
  • 29166ff chore(master): release 10.0.7 (#1869)
  • ec46800 fix(mime-node): keep a boundary that is only line breaks from stripping to empty
  • c838561 test(mime-funcs): pin Buffer and string mime words to the same output
  • 4327a59 fix(mime-funcs): do not double encode Buffer input when chunking base64 mime ...
  • fb5d244 test(mail-composer): pin the boundary injection path reachable from mail data
  • 03c1a5c fix(mime-node): strip line breaks from multipart boundary material (#1867)
  • dcf2f4e test(smtp-pool): wait on the limiter release instead of sleeping
  • 7f5c7a4 fix(smtp-pool): release rate-limited connections on close (#1866)
  • 933d263 chore(master): release 10.0.6 (#1868)
  • 437d7fc fix(addressparser): scan free text for an address in linear time
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 9.1.0 to 10.0.7.
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v9.1.0...v10.0.7)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants