Skip to content

chore(deps): bump nodemailer and @types/nodemailer - #261

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-e242833d34
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-e242833d34

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps nodemailer and @types/nodemailer. These dependencies needed to be updated together.
Updates nodemailer from 8.0.7 to 8.0.10

Release notes

Sourced from nodemailer's releases.

v8.0.10

8.0.10 (2026-05-29)

Bug Fixes

  • fall back to lower-severity handler when custom logger lacks a level method (6d849df)

v8.0.9

8.0.9 (2026-05-26)

Bug Fixes

  • two pending security advisories (jsonTransport access bypass, List-* CRLF injection) (#1820) (5f69497)

v8.0.8

8.0.8 (2026-05-23)

Bug Fixes

  • enforce strict TLS for OAuth2 and Ethereal credential requests (#1818) (833d6e5)
  • four listener/stream leaks in SMTP transport, connection, pool (#1817) (850bb91)
Changelog

Sourced from nodemailer's changelog.

8.0.10 (2026-05-29)

Bug Fixes

  • fall back to lower-severity handler when custom logger lacks a level method (6d849df)

8.0.9 (2026-05-26)

Bug Fixes

  • two pending security advisories (jsonTransport access bypass, List-* CRLF injection) (#1820) (5f69497)

8.0.8 (2026-05-23)

Bug Fixes

  • enforce strict TLS for OAuth2 and Ethereal credential requests (#1818) (833d6e5)
  • four listener/stream leaks in SMTP transport, connection, pool (#1817) (850bb91)
Commits
  • 948ae3f chore(master): release 8.0.10 (#1823)
  • 9eedad9 docs: add SECURITY.md policy (#1824)
  • 6d849df fix: fall back to lower-severity handler when custom logger lacks a level method
  • 07303cb chore(master): release 8.0.9 (#1821)
  • 5f69497 fix: two pending security advisories (jsonTransport access bypass, List-* CRL...
  • 15138a8 chore(master): release 8.0.8 (#1819)
  • 850bb91 fix: four listener/stream leaks in SMTP transport, connection, pool (#1817)
  • 833d6e5 fix: enforce strict TLS for OAuth2 and Ethereal credential requests (#1818)
  • See full diff in compare view

Updates @types/nodemailer from 7.0.11 to 8.0.0

Commits

@dependabot @github

dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from keysersoft as a code owner May 25, 2026 10:31
@github-actions github-actions Bot added the needs-review PR requires manual human review (e.g. major bumps, runtime changes) label May 25, 2026
@github-actions

Copy link
Copy Markdown

Skipping auto-merge: not-patch-or-minor (version-update:semver-major). A human should review this bump.

@dependabot dependabot Bot changed the title build(deps): bump nodemailer and @types/nodemailer chore(deps): bump nodemailer and @types/nodemailer May 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-e242833d34 branch from ec8e88c to f7a997d Compare May 28, 2026 09:59
@github-actions

Copy link
Copy Markdown

Skipping auto-merge: not-patch-or-minor (version-update:semver-major). A human should review this bump.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-e242833d34 branch from f7a997d to 304fa2a Compare May 31, 2026 13:51
@github-actions

Copy link
Copy Markdown

Skipping auto-merge: not-patch-or-minor (version-update:semver-major). A human should review this bump.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-e242833d34 branch from 304fa2a to 39e46d3 Compare May 31, 2026 14:13
@github-actions

Copy link
Copy Markdown

Skipping auto-merge: not-patch-or-minor (version-update:semver-major). A human should review this bump.

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) and [@types/nodemailer](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/nodemailer). These dependencies needed to be updated together.

Updates `nodemailer` from 8.0.7 to 8.0.10
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.7...v8.0.10)

Updates `@types/nodemailer` from 7.0.11 to 8.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/nodemailer)

---
updated-dependencies:
- dependency-name: "@types/nodemailer"
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: nodemailer
  dependency-version: 8.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-e242833d34 branch from 39e46d3 to 2d286d7 Compare May 31, 2026 18:22
@github-actions

Copy link
Copy Markdown

Skipping auto-merge: not-patch-or-minor (version-update:semver-major). A human should review this bump.

@dependabot @github

dependabot Bot commented on behalf of github May 31, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-e242833d34 branch May 31, 2026 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-review PR requires manual human review (e.g. major bumps, runtime changes)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants