[dependabot]

Bumps emailjs from 5.0.3 to 5.0.4.

Changelog

Sourced from emailjs's changelog.

[5.0.4] - 2026-10-26

Fixed

• Prevent addresses hidden in nested comments from becoming delivery recipients, and preserve semicolons inside quoted strings, comments, and angle addresses. Thanks to Vishal Suwalka for reporting the issue.

Changed

• Update development dependencies and remove unused packages.
• Replace ESLint and Prettier with Oxlint and Oxfmt, preserving existing rules and formatting conventions.

[5.0.0] - 2025-12-12

Added

• Added docker-compose.yml to run mailpit for manual end-to-end testing.
• Added test emails in scripts/ to be run agains mailpit.
• Increased test coverage

Migrated

• Migrated project to latest TypeScript (v5.x) with strict typing.
• Migrated all tests from AVA to Vitest.
• Refactored project structure to src/ for source code and co-located tests.

Changed

• Updated core dependencies to their latest versions.
• Updated tsconfig.json and adopted tsc for builds.
• Updated ESLint and Prettier configurations.

Removed

• AVA testing framework and its associated configurations.
• Rollup build system and its configurations.
• Removed JSDoc comments.
• Legacy source files and build artifacts (email.js, email.ts, smtp/ directory).
• Dropped legacy dual support (CommonJS/ESM) in favor of the latest Node.js standards.

[4.0.2] - 2023-05-12

Fixed

• redact passwords in error messages #339

[4.0.0] - 2022-04-20

... (truncated)

Commits

• 9b30a00 release 5.0.4
• bd7d25d chore: replace Prettier with Oxfmt
• 1544f03 style: normalize formatting before adopting Oxfmt
• 22e19c3 chore: replace ESLint with Oxlint
• 9e9f918 chore(deps): update mailparser and use its bundled types
• 3253e28 chore(deps): update smtp-server and use its bundled types
• fe04491 chore(deps): update Vitest and Vite to patched releases
• f5e7d89 chore(deps): remove unused ts-node and stale Nodemailer pin
• d01fe2c fix(address): prevent sending to addresses hidden in comments
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)