From cdee1aa48263b91dfd1034a719b3c2801cb15eb8 Mon Sep 17 00:00:00 2001 From: Thomas <28439359+thoda-dev@users.noreply.github.com> Date: Thu, 1 Oct 2026 11:32:50 +0200 Subject: [PATCH] chore(deps): update nodemailer to 10.0.13, fixes GHSA-v53p-9fqp-m79j, GHSA-8vvx-rff5-p5rq, GHSA-6vj9-mwq6-2f5v and GHSA-g57g-f23g-4646 --- apps/app/package.json | 3 +-- pnpm-lock.yaml | 24 +++++++----------------- 2 files changed, 8 insertions(+), 19 deletions(-) diff --git a/apps/app/package.json b/apps/app/package.json index 8db609a..5f88f93 100644 --- a/apps/app/package.json +++ b/apps/app/package.json @@ -34,7 +34,7 @@ "comark": "^0.6.2", "drizzle-orm": "^0.45.2", "hash-wasm": "^4.12.0", - "nodemailer": "^9.1.1", + "nodemailer": "^10.0.13", "nuxt": "^4.5.2", "postgres": "^3.4.9", "qrcode": "^1.5.4", @@ -45,7 +45,6 @@ "devDependencies": { "@nuxt/eslint": "1.17.0", "@nuxt/test-utils": "^4.3.2", - "@types/nodemailer": "^8.0.1", "@types/qrcode": "^1.5.6", "drizzle-kit": "^0.31.10", "eslint": "^10.10.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 212cfef..c064296 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -169,8 +169,8 @@ importers: specifier: ^4.12.0 version: 4.12.0 nodemailer: - specifier: ^9.1.1 - version: 9.1.1 + specifier: ^10.0.13 + version: 10.0.13 nuxt: specifier: ^4.5.2 version: 4.5.2(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.149.0)(@types/node@26.5.1)(@vue/compiler-sfc@3.5.42)(better-sqlite3@12.11.1)(db0@0.3.4(better-sqlite3@12.11.1)(drizzle-orm@0.45.2(better-sqlite3@12.11.1)(kysely@0.29.5)(postgres@3.4.9)))(drizzle-orm@0.45.2(better-sqlite3@12.11.1)(kysely@0.29.5)(postgres@3.4.9))(esbuild@0.28.2)(eslint@10.10.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.33.0)(magicast@0.5.4)(optionator@0.9.4)(oxc-parser@0.141.0)(rolldown@1.2.8)(rollup-plugin-visualizer@7.1.1(rolldown@1.2.8)(rollup@4.63.1))(rollup@4.63.1)(srvx@0.12.8)(supports-color@10.2.2)(terser@5.51.2)(tsx@4.23.13)(typescript@5.9.3)(vite@8.2.2(@types/node@26.5.1)(esbuild@0.28.2)(jiti@2.7.0)(terser@5.51.2)(tsx@4.23.13)(yaml@2.9.0))(vue-tsc@3.3.11(typescript@5.9.3))(yaml@2.9.0) @@ -196,9 +196,6 @@ importers: '@nuxt/test-utils': specifier: ^4.3.2 version: 4.3.2(esbuild@0.28.2)(magicast@0.5.4)(rolldown@1.2.8)(rollup@4.63.1)(typescript@5.9.3)(vite@8.2.2(@types/node@26.5.1)(esbuild@0.28.2)(jiti@2.7.0)(terser@5.51.2)(tsx@4.23.13)(yaml@2.9.0))(vitest@4.1.11(@types/node@26.5.1)(vite@8.2.2(@types/node@26.5.1)(esbuild@0.28.2)(jiti@2.7.0)(terser@5.51.2)(tsx@4.23.13)(yaml@2.9.0))) - '@types/nodemailer': - specifier: ^8.0.1 - version: 8.0.1 '@types/qrcode': specifier: ^1.5.6 version: 1.5.6 @@ -3549,9 +3546,6 @@ packages: '@types/node@26.5.1': resolution: {integrity: sha512-CzNm2FezW4VR/LjG6yUdiEgLE/rAQ9Slj5gCu/C2VrdcW7I0ahNZ8DRbHT7zOZ6r3ONgd/bsQIeSaoDGrd1C6g==} - '@types/nodemailer@8.0.1': - resolution: {integrity: sha512-PxpaInm8V1JQDd4j0ds5HfvWQk8JupS1C0Picb96QJsrrRDjBH+DlK7L4ZdNSqNULhiZRQHc40nLVShaGxXAMw==} - '@types/parse-path@7.1.0': resolution: {integrity: sha512-EULJ8LApcVEPbrfND0cRQqutIOdiIgJ1Mgrhpy755r14xMohPTEpkV/k28SJvuOs9bHRFW8x+KeDAEPiGQPB9Q==} deprecated: This is a stub types definition. parse-path provides its own type definitions, so you do not need this installed. @@ -6512,9 +6506,9 @@ packages: resolution: {integrity: sha512-mIrE/Cw9y+9Au6dS5vDKDhQza9YvG6w+ZrS6X+ZzA7yFW/soAeaups4Qzn1bL6g5FVy8WtP79+0j82oPIbqRjQ==} engines: {node: '>=18'} - nodemailer@9.1.1: - resolution: {integrity: sha512-izw9mVKFix6YSnC9eLgV6g1opl9DUlRio9ZNcq+Wu9Ujn2UwF+8Nl0B8nz22kEC+CTZCvinkxwJ0DeFbb6NwcQ==} - engines: {node: '>=6.0.0'} + nodemailer@10.0.13: + resolution: {integrity: sha512-SzG86OlvcW/NNhUFC6uROMwRTL4n7MswfQqC/T8mhkmnY1YVa23zUEMYi4ijSeXSl9GLz9ZeTJDUatEDuY5FeQ==} + engines: {node: '>=20.0.0'} nopt@8.1.0: resolution: {integrity: sha512-ieGu42u/Qsa4TFktmaKEwM6MQH0pOWnaB3htzh0JRtx84+Mebc0cbZYN5bC+6WTZ4+77xrL9Pn5m7CV6VIkV7A==} @@ -12848,10 +12842,6 @@ snapshots: dependencies: undici-types: 8.9.0 - '@types/nodemailer@8.0.1': - dependencies: - '@types/node': 22.20.2 - '@types/parse-path@7.1.0': dependencies: parse-path: 7.1.0 @@ -13769,7 +13759,7 @@ snapshots: chrome-launcher@1.2.1(supports-color@10.2.2): dependencies: - '@types/node': 22.20.2 + '@types/node': 26.5.1 escape-string-regexp: 4.0.0 is-wsl: 2.2.0 lighthouse-logger: 2.0.2(supports-color@10.2.2) @@ -16492,7 +16482,7 @@ snapshots: node-releases@2.0.55: {} - nodemailer@9.1.1: {} + nodemailer@10.0.13: {} nopt@8.1.0: dependencies: -- 2.51.2