Skip to content

Bump linkify-it and mailparser - #936

Merged
mattherman merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-a5f53be015
Sep 11, 2026
Merged

mattherman merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-a5f53be015

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps linkify-it to 5.0.2 and updates ancestor dependency mailparser. These dependencies need to be updated together.

Updates linkify-it from 5.0.1 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

  • Fixed DoS in mailto: links (restrict user name to 64 chars).
  • Restricted user/pass part length in links.
Commits

Updates mailparser from 3.9.7 to 3.9.25

Changelog

Sourced from mailparser's changelog.

3.9.25 (2026-09-11)

Bug Fixes

  • deps: update nodemailer to 10.0.8 (3aaba1a)

3.9.24 (2026-09-10)

Bug Fixes

  • deps: update nodemailer to 10.0.3 (fb296d4)

3.9.23 (2026-09-07)

Bug Fixes

  • deps: update nodemailer to 10.0.1 (5c2bda3)

3.9.22 (2026-09-06)

Bug Fixes

  • declare the Node 20 floor this package already has (e9de771)

3.9.21 (2026-09-06)

Bug Fixes

  • deps: move to nodemailer 10 (a83474e)

3.9.20 (2026-09-01)

Bug Fixes

  • deps: update nodemailer to 9.1.1 (36233e6)

3.9.19 (2026-08-31)

Bug Fixes

  • deps: update libmime and mailsplit for the CP932 extended areas (0bbe7a3)

3.9.18 (2026-08-31)

... (truncated)

Commits
  • a6b4bc5 chore(master): release 3.9.25 [skip-ci] (#442)
  • 3aaba1a fix(deps): update nodemailer to 10.0.8
  • a9b3d47 chore(master): release 3.9.24 [skip-ci] (#441)
  • fb296d4 fix(deps): update nodemailer to 10.0.3
  • 9d7cf26 chore(master): release 3.9.23 [skip-ci] (#440)
  • 5c2bda3 fix(deps): update nodemailer to 10.0.1
  • 8b29187 chore(master): release 3.9.22 [skip-ci] (#439)
  • e9de771 fix: declare the Node 20 floor this package already has
  • b694642 chore(master): release 3.9.21 [skip-ci] (#438)
  • a83474e fix(deps): move to nodemailer 10
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 23, 2026
@sonarqubecloud

Copy link
Copy Markdown

@mattherman

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [linkify-it](https://github.com/markdown-it/linkify-it) to 5.0.2 and updates ancestor dependency [mailparser](https://github.com/nodemailer/mailparser). These dependencies need to be updated together.


Updates `linkify-it` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/linkify-it@5.0.1...5.0.2)

Updates `mailparser` from 3.9.7 to 3.9.25
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v3.9.7...v3.9.25)

---
updated-dependencies:
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
- dependency-name: mailparser
  dependency-version: 3.9.14
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-a5f53be015 branch from b0804f2 to 80ec520 Compare September 11, 2026 21:27
@sonarqubecloud

Copy link
Copy Markdown

@mattherman
mattherman merged commit 36965d8 into master Sep 11, 2026
6 checks passed
@mattherman
mattherman deleted the dependabot/npm_and_yarn/multi-a5f53be015 branch September 11, 2026 21:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant