[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Diffend	Pending
nodemailer (source)	10.0.16 → 10.2.1					Diff	10.3.1 (+1)

---

Release Notes

nodemailer/nodemailer (nodemailer)

v10.2.1

Compare Source

Bug Fixes

• drop the comments of a Content-Type or Content-Disposition value with the stripComments option (b3052b7)

v10.2.0

Compare Source

Features

• add info.serverMessageId from the final 250 reply (108dddd)
• add pendingCount() to the SMTP pool (6cffb70)
• make header value encoding public with MimeNode encodeHeaderValue() (3b048c7)
• mark SMTP errors as permanent or transient with err.permanent (6a20e2a)

Bug Fixes

• label an ASCII message/rfc822 attachment 7bit instead of 8bit (ad66fa1)
• report the recipients an LMTP server refuses after DATA in rejectedErrors (dd64eb3)

v10.1.7

Compare Source

Bug Fixes

• mime-funcs: encode parameter values that look like encoded words (651d79b)

v10.1.6

Compare Source

Bug Fixes

• addressparser: read groups in the same pass as the rest of the list (ddf0de1)

v10.1.5

Compare Source

Bug Fixes

• addressparser: handle an address list without copying it per address (6bd09b3)
• addressparser: tokenize into offsets instead of an object per token (3fd3f50)

v10.1.4

Compare Source

Bug Fixes

• addressparser: apply the unexpected "<" rule outside quotes and comments (ee35f57)
• addressparser: bound group nesting at ten levels (ce63303)
• addressparser: drop the obsolete route from an angle-addr (3dbc730)
• addressparser: end a comment only at the ")" that closes the outermost one (0a87617)
• addressparser: honour quoted strings and comments inside an angle-addr and a group (1cd57d2)
• addressparser: never read a mailbox out of a comment (a1538ea)
• addressparser: read CFWS beside the "@​" of an addr-spec as nothing (ba3c095)
• addressparser: read the first addr-spec of the display text (038940a)
• split a domain literal off at the "@​" in front of it (d5983b0)

v10.1.3

Compare Source

Bug Fixes

• format References and strip URLs in linear time, release any number of streams (2f18641)

v10.1.2

Compare Source

Bug Fixes

• bound the work a message can make the mailer do and keep per-message auth off the transport's token endpoint (e347fa2)

v10.1.1

Compare Source

Bug Fixes

• fetch: strip credentials on any cross-origin redirect (a15360c)

v10.1.0

Compare Source

Features

• harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

• do not read the environment or the interface table on import (094179d)
• end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
• keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
• let the proxy handshake and the SMTP connection share one deadline (91ed683)
• mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
• mime-node: finish an encoded part only after its output was read (ec97d8f)
• qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
• smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
• smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
• smtp-connection: refuse a second connect() call (24ba2e0)
• turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

• encode base64 and quoted-printable without per-chunk delays (fd377bb)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.