Skip to content

Bump the default group with 2 updates - #260

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/default-e1993572b7
Oct 26, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/default-e1993572b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the default group with 2 updates: body-parser and nodemailer.

Updates body-parser from 2.3.0 to 2.4.0

Release notes

Sourced from body-parser's releases.

v2.4.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.3.0...v2.4.0

Changelog

Sourced from body-parser's changelog.

2.4.0

  • Security fix for GHSA-27r3-jxmh-p828 (CVE-2026-111181)
  • feat: add zstd content-encoding support (#586)
    • Requires Node.js ^22.15.0 or >=23.8.0; older versions keep returning 415 for zstd encoded bodies
  • fix: avoid mutating the parser options and the request object while reading the body (#742, #750)
  • perf(json): avoid first-char regex for direct JSON bodies (#744)
  • deps:
    • content-type@^2.1.0
    • iconv-lite^0.7.3
    • qs@^6.16.1
Commits
  • b4744d7 2.4.0 (#777)
  • f7075ea fix: prevent process crash from trailing bytes after a compressed body
  • 185ff1d chore: update dependencies (#778)
  • 73713f7 docs: fix depth error description (#776)
  • 2dcc826 docs: improve readability (#756)
  • 402dbdc docs: note that req.body may be undefined in v2 (#752)
  • 9883a1e perf: inline content stream setup (#750)
  • 02101da fix(test): pin supertest to 7.3.0 to avoid 7.3.1 regression (#773)
  • 822a0fd build(deps): bump the github-actions group with 3 updates (#771)
  • aa9889b ci: trigger npm publish on release published and set dist-tag (#768)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for body-parser since your current version.


Updates nodemailer from 10.1.7 to 10.2.1

Release notes

Sourced from nodemailer's releases.

v10.2.1

10.2.1 (2026-10-22)

Bug Fixes

  • drop the comments of a Content-Type or Content-Disposition value with the stripComments option (b3052b7)

v10.2.0

10.2.0 (2026-10-21)

Features

  • add info.serverMessageId from the final 250 reply (108dddd)
  • add pendingCount() to the SMTP pool (6cffb70)
  • make header value encoding public with MimeNode encodeHeaderValue() (3b048c7)
  • mark SMTP errors as permanent or transient with err.permanent (6a20e2a)

Bug Fixes

  • label an ASCII message/rfc822 attachment 7bit instead of 8bit (ad66fa1)
  • report the recipients an LMTP server refuses after DATA in rejectedErrors (dd64eb3)
Changelog

Sourced from nodemailer's changelog.

10.2.1 (2026-10-22)

Bug Fixes

  • drop the comments of a Content-Type or Content-Disposition value with the stripComments option (b3052b7)

10.2.0 (2026-10-21)

Features

  • add info.serverMessageId from the final 250 reply (108dddd)
  • add pendingCount() to the SMTP pool (6cffb70)
  • make header value encoding public with MimeNode encodeHeaderValue() (3b048c7)
  • mark SMTP errors as permanent or transient with err.permanent (6a20e2a)

Bug Fixes

  • label an ASCII message/rfc822 attachment 7bit instead of 8bit (ad66fa1)
  • report the recipients an LMTP server refuses after DATA in rejectedErrors (dd64eb3)
Commits
  • 8dbff1d Merge pull request #1902 from nodemailer/release-please--branches--master--co...
  • 6fe37ea test: import mailauth only on a Node.js it supports
  • 9f02395 chore(master): release 10.2.1
  • 5c80d84 chore: update dependencies
  • b3052b7 fix: drop the comments of a Content-Type or Content-Disposition value with th...
  • f656674 Merge pull request #1901 from nodemailer/release-please--branches--master--co...
  • 7931774 chore(master): release 10.2.0
  • ad66fa1 fix: label an ASCII message/rfc822 attachment 7bit instead of 8bit
  • 108dddd feat: add info.serverMessageId from the final 250 reply
  • 6a20e2a feat: mark SMTP errors as permanent or transient with err.permanent
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the default group with 2 updates: [body-parser](https://github.com/expressjs/body-parser) and [nodemailer](https://github.com/nodemailer/nodemailer).


Updates `body-parser` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.3.0...v2.4.0)

Updates `nodemailer` from 10.1.7 to 10.2.1
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.1.7...v10.2.1)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: default
- dependency-name: nodemailer
  dependency-version: 10.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: default
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 26, 2026
@github-actions
github-actions Bot enabled auto-merge October 26, 2026 07:03
@github-actions
github-actions Bot merged commit ae8915f into main Oct 26, 2026
4 of 5 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/default-e1993572b7 branch October 26, 2026 07:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants