Update dependency nodemailer to v9.0.3 #119

Open
renovatebot wants to merge 1 commit from renovate/nodemailer-9.x-lockfile into main
Collaborator

This PR contains the following updates:

Package Type Update Change
nodemailer (source) dependencies patch 9.0.19.0.3

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

nodemailer/nodemailer (nodemailer)

v9.0.3

Compare Source

Bug Fixes
  • smtp-connection: harden STARTTLS upgrade and secure socket handling (#​1835) (07d8253)

v9.0.2

Compare Source

Bug Fixes
  • addressparser: keep operator chars inside an address-literal as text (#​1829) (9ba1064)
  • harden smtp-connection low-severity issues (22ddcea)
  • harden smtp-connection response parsing and socket lifecycle (68860b9)
  • prevent SES transport callback double-invocation and hang on sync errors (#​1831) (9517bc5)
  • reject CRLF in HTTP proxy CONNECT destination to prevent request injection (6347b47)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [nodemailer](https://nodemailer.com/) ([source](https://github.com/nodemailer/nodemailer)) | dependencies | patch | [`9.0.1` → `9.0.3`](https://renovatebot.com/diffs/npm/nodemailer/9.0.1/9.0.3) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>nodemailer/nodemailer (nodemailer)</summary> ### [`v9.0.3`](https://github.com/nodemailer/nodemailer/blob/HEAD/CHANGELOG.md#903-2026-06-30) [Compare Source](https://github.com/nodemailer/nodemailer/compare/v9.0.2...v9.0.3) ##### Bug Fixes - **smtp-connection:** harden STARTTLS upgrade and secure socket handling ([#&#8203;1835](https://github.com/nodemailer/nodemailer/issues/1835)) ([07d8253](https://github.com/nodemailer/nodemailer/commit/07d8253326ecefff9f7d92c157429ce8bc7335f8)) ### [`v9.0.2`](https://github.com/nodemailer/nodemailer/blob/HEAD/CHANGELOG.md#902-2026-06-29) [Compare Source](https://github.com/nodemailer/nodemailer/compare/v9.0.1...v9.0.2) ##### Bug Fixes - **addressparser:** keep operator chars inside an address-literal as text ([#&#8203;1829](https://github.com/nodemailer/nodemailer/issues/1829)) ([9ba1064](https://github.com/nodemailer/nodemailer/commit/9ba1064f3b115cd60cb63aa954a3c0961e86fbb7)) - harden smtp-connection low-severity issues ([22ddcea](https://github.com/nodemailer/nodemailer/commit/22ddcea8ed043e4ea23b8971b75a2df196b5a581)) - harden smtp-connection response parsing and socket lifecycle ([68860b9](https://github.com/nodemailer/nodemailer/commit/68860b94311b5b6837754e5e790f186ca8a00b70)) - prevent SES transport callback double-invocation and hang on sync errors ([#&#8203;1831](https://github.com/nodemailer/nodemailer/issues/1831)) ([9517bc5](https://github.com/nodemailer/nodemailer/commit/9517bc5dc94e77907bb157e3466bf73a2b327f5c)) - reject CRLF in HTTP proxy CONNECT destination to prevent request injection ([6347b47](https://github.com/nodemailer/nodemailer/commit/6347b47c7d12f9d3acf53d391b921e836f400640)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMjcuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIyNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update dependency nodemailer to v9.0.2
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
ci / build-image (pull_request) Successful in 8m31s
ci / test-image (pull_request) Successful in 37s
6b66561abc
renovatebot force-pushed renovate/nodemailer-9.x-lockfile from 6b66561abc
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
ci / build-image (pull_request) Successful in 8m31s
ci / test-image (pull_request) Successful in 37s
to 01effafe61
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
ci / build-image (pull_request) Successful in 5m13s
ci / test-image (pull_request) Successful in 31s
2026-07-07 19:10:25 +00:00
Compare
renovatebot changed title from Update dependency nodemailer to v9.0.2 to Update dependency nodemailer to v9.0.3 2026-07-07 19:10:28 +00:00
All checks were successful
renovate/stability-days Updates have met minimum release age requirement
ci / build-image (pull_request) Successful in 5m13s
ci / test-image (pull_request) Successful in 31s
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/nodemailer-9.x-lockfile:renovate/nodemailer-9.x-lockfile
git switch renovate/nodemailer-9.x-lockfile

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/nodemailer-9.x-lockfile
git switch renovate/nodemailer-9.x-lockfile
git rebase main
git switch main
git merge --ff-only renovate/nodemailer-9.x-lockfile
git switch renovate/nodemailer-9.x-lockfile
git rebase main
git switch main
git merge --no-ff renovate/nodemailer-9.x-lockfile
git switch main
git merge --squash renovate/nodemailer-9.x-lockfile
git switch main
git merge --ff-only renovate/nodemailer-9.x-lockfile
git switch main
git merge renovate/nodemailer-9.x-lockfile
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
jonathan/hostr!119
No description provided.