[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
nodemailer (source)	10.0.11 → 10.1.0

---

Release Notes

nodemailer/nodemailer (nodemailer)

v10.1.0

Compare Source

Features

• harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

• do not read the environment or the interface table on import (094179d)
• end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
• keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
• let the proxy handshake and the SMTP connection share one deadline (91ed683)
• mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
• mime-node: finish an encoded part only after its output was read (ec97d8f)
• qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
• smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
• smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
• smtp-connection: refuse a second connect() call (24ba2e0)
• turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

• encode base64 and quoted-printable without per-chunk delays (fd377bb)

v10.0.16

Compare Source

Bug Fixes

• addressparser: keep an escaped parenthesis inside a comment (c4ae20d)
• fetch: keep the case of cookie names (#​1888) (9f16eed)
• fetch: read the cookie name-value pair by position (645e97c)

v10.0.15

Compare Source

Bug Fixes

• errors: inherit NodemailerError code from ErrnoException (e99db61), closes #​1884
• errors: keep NodemailerError compatible with @​types/node 26 ErrnoException (#​1885) (b660328)

v10.0.14

Compare Source

Bug Fixes

• addressparser: keep a quoted display name that holds no "@​" out of the address (3570d26)
• addressparser: keep the group recursion depth out of the options object (a680254)
• addressparser: stop a "[" from hiding the operators after it (5619784)
• dkim: trim a header field name in linear time (c6f7a55)
• mime-funcs: read and write header parameters per rfc2045 and rfc2231 (b8ccad7)
• search only the new bytes for the end of the proxy CONNECT response (81efd7b)

v10.0.13

Compare Source

Bug Fixes

• read the advertised SASL methods without backtracking regexes (b5a896f)
• strip comments inside an angle-addr before it becomes the address (a502247)

v10.0.12

Compare Source

Bug Fixes

• settle every send on a connection error, back off pool requeues, turn a bare CR into CRLF, bound fetch, honour requireTLS (63ccd66)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on the 1st and 15th day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	nodemailer@​10.0.11 ⏵ 10.1.0			+1	+1

View full report

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[fbuireu]

🎉 This PR is included in version 1.28.7 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀