Skip to content

chore(deps): bump the npm group with 3 updates - #54

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-092f4c1aa3
Oct 31, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-092f4c1aa3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 3 updates: dotenv, nodemailer and resend.

Updates dotenv from 18.0.8 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

  • Permit DOTENV_PATH being empty string with the CLI (#1076)
Commits
  • 8d1ab85 18.0.9
  • 59a40ce changelog
  • 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
  • bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
  • 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
  • 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
  • See full diff in compare view

Updates nodemailer from 10.1.7 to 10.2.1

Release notes

Sourced from nodemailer's releases.

v10.2.1

10.2.1 (2026-10-22)

Bug Fixes

  • drop the comments of a Content-Type or Content-Disposition value with the stripComments option (b3052b7)

v10.2.0

10.2.0 (2026-10-21)

Features

  • add info.serverMessageId from the final 250 reply (108dddd)
  • add pendingCount() to the SMTP pool (6cffb70)
  • make header value encoding public with MimeNode encodeHeaderValue() (3b048c7)
  • mark SMTP errors as permanent or transient with err.permanent (6a20e2a)

Bug Fixes

  • label an ASCII message/rfc822 attachment 7bit instead of 8bit (ad66fa1)
  • report the recipients an LMTP server refuses after DATA in rejectedErrors (dd64eb3)
Changelog

Sourced from nodemailer's changelog.

10.2.1 (2026-10-22)

Bug Fixes

  • drop the comments of a Content-Type or Content-Disposition value with the stripComments option (b3052b7)

10.2.0 (2026-10-21)

Features

  • add info.serverMessageId from the final 250 reply (108dddd)
  • add pendingCount() to the SMTP pool (6cffb70)
  • make header value encoding public with MimeNode encodeHeaderValue() (3b048c7)
  • mark SMTP errors as permanent or transient with err.permanent (6a20e2a)

Bug Fixes

  • label an ASCII message/rfc822 attachment 7bit instead of 8bit (ad66fa1)
  • report the recipients an LMTP server refuses after DATA in rejectedErrors (dd64eb3)
Commits
  • 8dbff1d Merge pull request #1902 from nodemailer/release-please--branches--master--co...
  • 6fe37ea test: import mailauth only on a Node.js it supports
  • 9f02395 chore(master): release 10.2.1
  • 5c80d84 chore: update dependencies
  • b3052b7 fix: drop the comments of a Content-Type or Content-Disposition value with th...
  • f656674 Merge pull request #1901 from nodemailer/release-please--branches--master--co...
  • 7931774 chore(master): release 10.2.0
  • ad66fa1 fix: label an ASCII message/rfc822 attachment 7bit instead of 8bit
  • 108dddd feat: add info.serverMessageId from the final 250 reply
  • 6a20e2a feat: mark SMTP errors as permanent or transient with err.permanent
  • Additional commits viewable in compare view

Updates resend from 6.34.1 to 6.35.0

Release notes

Sourced from resend's releases.

v6.35.0

What's Changed

Full Changelog: resend/resend-node@v6.34.1...v6.35.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 3 updates: [dotenv](https://github.com/motdotla/dotenv), [nodemailer](https://github.com/nodemailer/nodemailer) and [resend](https://github.com/resend/resend-node).


Updates `dotenv` from 18.0.8 to 18.0.9
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.8...v18.0.9)

Updates `nodemailer` from 10.1.7 to 10.2.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.1.7...v10.2.1)

Updates `resend` from 6.34.1 to 6.35.0
- [Release notes](https://github.com/resend/resend-node/releases)
- [Changelog](https://github.com/resend/resend-node/blob/canary/CHANGELOG.md)
- [Commits](resend/resend-node@v6.34.1...v6.35.0)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: nodemailer
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: resend
  dependency-version: 6.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 31, 2026
@vercel

vercel Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
wesnest-search Skipped Skipped Oct 31, 2026 3:53pm UTC

@github-actions
github-actions Bot enabled auto-merge (squash) October 31, 2026 15:53
@github-actions
github-actions Bot merged commit 9ebb7e1 into main Oct 31, 2026
10 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-092f4c1aa3 branch October 31, 2026 15:54

This branch was previously deployed

1 inactive deployment
Preview — 58a63b44 Deployed Oct 31, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants