Skip to content

build(deps): bump nodemailer from 8.0.4 to 8.0.5#3076

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodemailer-8.0.5
Open

build(deps): bump nodemailer from 8.0.4 to 8.0.5#3076
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodemailer-8.0.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026 •
edited
Loading

Bumps nodemailer from 8.0.4 to 8.0.5.

Release notes

Sourced from nodemailer's releases.

v8.0.5

8.0.5 (2026-04-07)

Bug Fixes

  • decode SMTP server responses as UTF-8 at line boundary (95876b1)
  • sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)
Changelog

Sourced from nodemailer's changelog.

8.0.5 (2026-04-07)

Bug Fixes

  • decode SMTP server responses as UTF-8 at line boundary (95876b1)
  • sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)
Commits
  • 202cfb3 chore(master): release 8.0.5 (#1809)
  • b634abf docs: add CLAUDE.md with project conventions and release process
  • 95876b1 fix: decode SMTP server responses as UTF-8 at line boundary
  • 0a43876 fix: sanitize CRLF in transport name option to prevent SMTP command injection...
  • 08e59e6 chore: update dev dependencies
  • See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 8, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 8, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
agents-api Ready Ready Preview, Comment Apr 15, 2026 3:40pm
agents-docs Ready Ready Preview, Comment Apr 15, 2026 3:40pm
agents-manage-ui Ready Ready Preview, Comment Apr 15, 2026 3:40pm

Request Review

@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented Apr 8, 2026 •
edited
Loading

⚠️ No Changeset found

Latest commit: 73e3809

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 8, 2026 •
edited
Loading

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from b0ced4a to 303e12d Compare April 8, 2026 20:32
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from 303e12d to ee35eea Compare April 9, 2026 02:37
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from ee35eea to 988265c Compare April 9, 2026 19:49
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from 988265c to 0d1812e Compare April 10, 2026 15:01
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from 0d1812e to f1a319e Compare April 10, 2026 21:40
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from 2073ec5 to 206c58c Compare April 15, 2026 00:54
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from 206c58c to 8e24017 Compare April 15, 2026 13:29
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from 8e24017 to 7bc0b98 Compare April 15, 2026 15:36
@dependabot dependabot Bot changed the title chore(deps): bump nodemailer from 8.0.4 to 8.0.5 build(deps): bump nodemailer from 8.0.4 to 8.0.5 Apr 16, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch 7 times, most recently from 64ffb6d to dee8d44 Compare April 23, 2026 00:44
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch 3 times, most recently from e92682e to e39ac87 Compare April 28, 2026 14:32
@dependabot
build(deps): bump nodemailer from 8.0.4 to 8.0.5
73e3809 
Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 8.0.4 to 8.0.5.
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v8.0.4...v8.0.5)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 8.0.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/nodemailer-8.0.5 branch from e39ac87 to 73e3809 Compare May 5, 2026 21:30
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 19, 2026

This pull request has been automatically marked as stale because it has not had recent activity.
It will be closed in 7 days if no further activity occurs.

If this PR is still relevant:

  • Rebase it on the latest main branch
  • Add a comment explaining its current status
  • Request a review if it's ready

Thank you for your contributions!

@github-actions github-actions Bot added the stale label May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code stale

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants