Skip to content

chore(deps): bump resend from 6.9.3 to 6.10.0 - #2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/resend-6.10.0
Closed

chore(deps): bump resend from 6.9.3 to 6.10.0#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/resend-6.10.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 12, 2026

Copy link
Copy Markdown

Bumps resend from 6.9.3 to 6.10.0.

Release notes

Sourced from resend's releases.

v6.10.0

What's Changed

New Contributors

Full Changelog: resend/resend-node@v6.9.4...v6.10.0

v6.9.4

What's Changed

Full Changelog: resend/resend-node@v6.9.3...v6.9.4

Commits
  • 0d8923c chore: bump 6.10.0 (#900)
  • c643cf2 feat: support logs endpoints (#899)
  • ed788b1 chore(ci): pin GitHub Actions workflows to commit SHAs (#889)
  • e0c0b15 chore(deps): update dependency @​types/node to v24.12.0 (#869)
  • f86ff17 feat(ci): split script and workflow for e2e test (#887)
  • 264bfde fix(deps): update dependency svix to v1.88.0 (#873)
  • bd8fd85 chore(deps): update tj-actions/changed-files digest to 445b0eb (#870)
  • ca968c7 chore(deps): update dependency tsdown to v0.21.4 (#872)
  • b64ba52 chore(deps): update pnpm to v10.32.1 (#871)
  • 440843d fix(deps): update dependency next to v16.2.0 (#882)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by felipefreitag, a new releaser for resend since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [resend](https://github.com/resend/resend-node) from 6.9.3 to 6.10.0.
- [Release notes](https://github.com/resend/resend-node/releases)
- [Commits](resend/resend-node@v6.9.3...v6.10.0)

---
updated-dependencies:
- dependency-name: resend
  dependency-version: 6.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 12, 2026
@vercel

vercel Bot commented Apr 12, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
sammapix Error Error Apr 12, 2026 10:22pm

Request Review

@dependabot @github

dependabot Bot commented on behalf of github Apr 19, 2026

Copy link
Copy Markdown
Author

Superseded by #10.

@dependabot dependabot Bot closed this Apr 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/resend-6.10.0 branch April 19, 2026 14:16
samma1997 added a commit that referenced this pull request Apr 22, 2026
Nuovo tool webp-to-jpg + fix critico: entrambi i converter (png-to-jpg
e webp-to-jpg) ora hanno icone SVG animate dedicate anziché riutilizzare
IconWebP come placeholder. Anche scoperto punto di registrazione
mancante nella bibbia: components/tools/ToolsPageClient.tsx.

New files:
- app/tools/webp-to-jpg/page.tsx — landing SEO keyword "webp to jpg
  converter" (4-7K/mese volume GSC)
- components/tools/WebpToJpgClient.tsx — Canvas API, background toggle
  white/black per transparent WebP, batch 20/200, accent verde #10B981

New icons (components/ui/ToolCard.tsx):
- IconPngToJpg: PNG box con checker pattern trasparenza pulsante
  + arrow slide + JPG box + badge "−80%" bouncy
- IconWebpToJpg: WebP box + arrow slide + JPG box + badge "✓ OK"
  con check-mark stroke-dashoffset animation (compatibility signal)

Registration complete (10 punti bibbia v2):
- lib/tools-metadata.ts (entry webp-to-jpg)
- app/sitemap.ts (URL)
- components/tools/ToolsPageClient.tsx (PUNTO MANCANTE scoperto —
  aggiunto ENTRAMBI png-to-jpg + webp-to-jpg in un colpo)
- components/home/HomepageToolGrid.tsx (Icon dedicata per entrambi)
- components/dashboard/DashboardSidebar.tsx (sidebar + categoria
  Optimize aggiornata)
- components/dashboard/DashboardHome.tsx (Icon dedicata per entrambi)
- app/dashboard/tools/[tool]/page.tsx (TOOL_MAP + TOOL_ICONS con Icon
  dedicate + TOOL_DATA con steps/proTip)
- app/pricing/page.tsx (Icon dedicata per entrambi)

Counter: 28 → 29 tools in 5 file (tools/page, vs, about, try-pro,
daily-todo cron).

Aggiornata bibbia feedback-tool-creation-checklist.md v2 con:
- Sezione B icona SVG dedicata obbligatoria
- Sezione C aggiunta ToolsPageClient come 10° punto registrazione
- Sezione I gotcha: ProUpsellModal props corrette, trigger valido,
  git add -f per bypass .gitignore bug, 307 dashboard redirect corretto

Test 22/4/2026: tsc 0 errori, /tools/webp-to-jpg HTTP 200, dashboard
307 redirect auth corretto.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
samma1997 added a commit that referenced this pull request May 17, 2026
…data?"

Cluster topical authority su pattern alto-CTR confermato (33-50% nei dati GSC SammaPix).
Approccio research-based con fonti verificate, NO fake test.

5 articoli + TTS audio + cover Privacy + entry blog-posts + BLOG_SLUGS:

1. does-discord-strip-exif-metadata
   Hook: "Discord ha 6 fonti che dicono strips, ma zero documentazione ufficiale"
   Sources: PrivMeta, MetaRemover, RemovEXIF, Discord community thread, Slashdot
   Verified: file limits 10MB free / 50MB Nitro Basic / 500MB full Nitro

2. does-signal-strip-exif-metadata
   Hook: "Signal è l'unico che strippa di default E non retain server-side"
   Sources: PrivacyStrip, EditPrivacy, Fastio, PrivacyGuides forum
   Verified: GitHub bug #12075 (Android adds new EXIF) — Signal admits imperfection

3. does-telegram-strip-exif-metadata
   Hook: "Telegram strip solo se comprimi — send-as-file preserva tutto"
   Sources: MetaClean, EditPrivacy, Fastio, 4n6 forensics
   Verified: bugs.telegram.org #19150 ("GPS erased when sent as file")

4. does-reddit-strip-exif-metadata
   Hook: "HackerOne #1069039 — HEIC-to-PNG leaked GPS pubblicamente"
   Sources: MetaClean, Fastio, WildandFree Tools, HackerOne disclosure
   Verified: bug famoso 2020 fixato + Reddit ha 4+ upload paths diversi

5. does-imessage-strip-exif-metadata
   Hook: "iMessage è l'OUTLIER — NON strippa nulla, GPS viaggia sempre"
   Sources: MacRumors forums, Apple Community, iOS docs
   Verified: iOS 13+ share-sheet location toggle + in-Messages camera workaround

OGNI articolo ha:
- Title <60c, description <155c, 8-10 sezioni, 6 FAQ, 2+ tabelle, 2000+ parole
- Hero Pexels (verified 200), cover copiata da template Privacy
- Link interni: /tools/exif x5, /tools/compress x1, hub which-apps + altri cluster
- Schema.org: Article + Breadcrumb + FAQPage
- TTS audio (3-4MB each) + timing JSON per audio player

DECISIONI critiche (audit pre-push):
- SKIP "Does WhatsApp strip EXIF" — cannibalizza compress-images-whatsapp-quality esistente
- SKIP altri cluster — validare prima questo pattern (7-14 giorni dati GSC)
- HOLD Instagram + Twitter/X — solo se cluster valida, batch #2 con dati alla mano

Atteso: +280 imp/mese cluster Privacy in 3 mesi (somma query confermate GSC)
samma1997 added a commit that referenced this pull request May 17, 2026
…rral

LEVA #2 — referral hardening prima di push aggressivo growth.

Safeguard nuovi (lib/referral.ts):

1. **normalizeEmail()** — defeats Gmail dots+/aliases tricks
   john.doe+anything@gmail.com → johndoe@gmail.com
   googlemail.com → gmail.com
   Strip +aliases anche su FastMail/ProtonMail
   Reject signup se normalized email match utente esistente diverso

2. **isDisposableEmail()** — blocca domini throwaway noti
   npm pkg: disposable-email-domains (~75K domini tracciati)
   Reject signup su mailinator, temp-mail, 10minutemail, etc.
   Fail-open se lista non disponibile (no block legit signup)

3. **checkIpRateLimit()** — max 3 referral signups da stesso IP / 30 giorni
   Redis INCR + TTL 30d su referral:ip_rate:{ip}
   Catches VPN-rotation multi-account abuse

4. **checkAndRememberPaymentFingerprint()** — anti same-card farming
   Estrae stripe.payment_method.card.fingerprint dal webhook
   Block conversion-reward se stesso fingerprint già usato da altro userId
   1 persona che paga con stessa card per 5 account → 1 reward, non 5

Wire (app/api/webhook/stripe/route.ts):
- Conversion reward concesso SOLO se fingerprint OK
- Best-effort: fingerprint check skip se Stripe API fail (no block legit)

Safeguard PRE-ESISTENTI mantenuti (già robusti):
- Same-IP check (referrer/referred)
- Self-referral block
- Monthly cap 50/referrer
- First-link-wins (no double referral)
- Conversion-based reward (1 mese free al pagamento, non signup)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants