nodemailer - npm Package Compare versions

Comparing version 6.9.13 to 6.9.14

.ncurc.js

@@ -5,4 +5,7 @@ module.exports = {
         // API changes break existing tests
-        'proxy'
+        'proxy',
+
+        // API changes
+        'eslint'
     ]
 };

CHANGELOG.md

 # CHANGELOG
 
+## [6.9.14](https://github.com/nodemailer/nodemailer/compare/v6.9.13...v6.9.14) (2024-06-19)
+
+
+### Bug Fixes
+
+* **api:** Added support for Ethereal authentication ([56b2205](https://github.com/nodemailer/nodemailer/commit/56b22052a98de9e363f6c4d26d1512925349c3f3))
+* **services.json:** Add Email Services Provider Feishu Mail (CN) ([#1648](https://github.com/nodemailer/nodemailer/issues/1648)) ([e9e9ecc](https://github.com/nodemailer/nodemailer/commit/e9e9ecc99b352948a912868c7912b280a05178c6))
+* **services.json:** update Mailtrap host and port in well known ([#1652](https://github.com/nodemailer/nodemailer/issues/1652)) ([fc2c9ea](https://github.com/nodemailer/nodemailer/commit/fc2c9ea0b4c4f4e514143d2a138c9a23095fc827))
+* **well-known-services:** Add Loopia in well known services ([#1655](https://github.com/nodemailer/nodemailer/issues/1655)) ([21a28a1](https://github.com/nodemailer/nodemailer/commit/21a28a18fc9fdf8e0e86ddd846e54641395b2cb6))
+
 ## [6.9.13](https://github.com/nodemailer/nodemailer/compare/v6.9.12...v6.9.13) (2024-03-20)
@@ -4,0 +14,0 @@

lib/nodemailer.js

@@ -16,2 +16,3 @@ 'use strict';
 const ETHEREAL_WEB = (process.env.ETHEREAL_WEB || 'https://ethereal.email').replace(/\/+$/, '');
+const ETHEREAL_API_KEY = (process.env.ETHEREAL_API_KEY || '').replace(/\s*/g, '') || null;
 const ETHEREAL_CACHE = ['true', 'yes', 'y', '1'].includes((process.env.ETHEREAL_CACHE || 'yes').toString().trim().toLowerCase());
@@ -83,11 +84,17 @@
 
+    let requestHeaders = {};
+    let requestBody = {
+        requestor: packageData.name,
+        version: packageData.version
+    };
+
+    if (ETHEREAL_API_KEY) {
+        requestHeaders.Authorization = 'Bearer ' + ETHEREAL_API_KEY;
+    }
+
     let req = nmfetch(apiUrl + '/user', {
         contentType: 'application/json',
         method: 'POST',
-        body: Buffer.from(
-            JSON.stringify({
-                requestor: packageData.name,
-                version: packageData.version
-            })
-        )
+        headers: requestHeaders,
+        body: Buffer.from(JSON.stringify(requestBody))
     });
@@ -94,0 +101,0 @@

lib/well-known/services.json

@@ -60,2 +60,10 @@ {
 
+    "Feishu Mail": {
+        "aliases": ["Feishu", "FeishuMail"],
+        "domains": ["www.feishu.cn"],
+        "host": "smtp.feishu.cn",
+        "port": 465,
+        "secure": true
+    },
+
     "GandiMail": {
@@ -113,3 +121,6 @@ "aliases": ["Gandi", "Gandi Mail"],
     },
-
+    "Loopia": {
+        "host": "mailcluster.loopia.se",
+        "port": 465
+    },
     "mail.ee": {
@@ -152,4 +163,4 @@ "host": "smtp.mail.ee"
     "Mailtrap": {
-        "host": "smtp.mailtrap.io",
-        "port": 2525
+        "host": "live.smtp.mailtrap.io",
+        "port": 587
     },
@@ -156,0 +167,0 @@

package.json

 {
     "name": "nodemailer",
-    "version": "6.9.13",
+    "version": "6.9.14",
     "description": "Easy as cake e-mail sending from your Node.js applications",
@@ -26,5 +26,5 @@ "main": "lib/nodemailer.js",
     "devDependencies": {
-        "@aws-sdk/client-ses": "3.529.1",
+        "@aws-sdk/client-ses": "3.600.0",
         "bunyan": "1.8.15",
-        "c8": "9.1.0",
+        "c8": "10.1.2",
         "eslint": "8.57.0",
@@ -34,3 +34,3 @@ "eslint-config-nodemailer": "1.2.0",
         "libbase64": "1.3.0",
-        "libmime": "5.3.4",
+        "libmime": "5.3.5",
         "libqp": "2.1.0",
@@ -40,3 +40,3 @@ "nodemailer-ntlm-auth": "1.0.4",
         "proxy-test-server": "1.0.0",
-        "smtp-server": "3.13.3"
+        "smtp-server": "3.13.4"
     },
@@ -43,0 +43,0 @@ "engines": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

504715

increased by0.3%

Lines of code

12120

increased by0.15%

Worsened metrics

Number of low supply chain risk alerts

7

increased by16.67%

No dependency changes