nodemailer - npm Package Compare versions

Comparing version 8.0.6 to 8.0.7

CHANGELOG.md

 # CHANGELOG
 
+## [8.0.7](https://github.com/nodemailer/nodemailer/compare/v8.0.6...v8.0.7) (2026-04-27)
+
+
+### Bug Fixes
+
+* keep domain as UTF-8 when local part is non-ASCII ([#1814](https://github.com/nodemailer/nodemailer/issues/1814)) ([66d4ecb](https://github.com/nodemailer/nodemailer/commit/66d4ecb5aa431f3614a26b3c08b9c63cdf32a9ea))
+
 ## [8.0.6](https://github.com/nodemailer/nodemailer/compare/v8.0.5...v8.0.6) (2026-04-24)
@@ -4,0 +11,0 @@

lib/mime-node/index.js

@@ -1228,13 +1228,17 @@ /* eslint no-undefined: 0, prefer-spread: 0, no-control-regex: 0 */
 
-        // Usernames are not touched and are kept as is even if these include unicode
-        // Domains are punycoded by default
-        // 'jõgeva.ee' will be converted to 'xn--jgeva-dua.ee'
-        // non-unicode domains are left as is
+        // Usernames are not touched and are kept as is even if these include unicode.
+        // Domains are punycoded when the local part is ASCII ('safe@jõgeva.ee' -> '[e-mail]').
+        // When the local part contains non-ASCII bytes the address already requires SMTPUTF8,
+        // so the domain is kept (or decoded back) as UTF-8 for symmetry on both sides of '@'.
 
-        let encodedDomain;
+        let encodedDomain = domain;
 
         try {
-            encodedDomain = punycode.toASCII(domain.toLowerCase());
+            if (/[\x80-\uFFFF]/.test(user)) {
+                encodedDomain = punycode.toUnicode(domain.toLowerCase());
+            } else {
+                encodedDomain = punycode.toASCII(domain.toLowerCase());
+            }
         } catch (_err) {
-            // keep as is?
+            // keep domain as supplied
         }
@@ -1241,0 +1245,0 @@

package.json

 {
     "name": "nodemailer",
-    "version": "8.0.6",
+    "version": "8.0.7",
     "description": "Easy as cake e-mail sending from your Node.js applications",
@@ -30,16 +30,15 @@ "main": "lib/nodemailer.js",
     "devDependencies": {
-        "@aws-sdk/client-sesv2": "3.1025.0",
+        "@aws-sdk/client-sesv2": "3.1037.0",
         "bunyan": "1.8.15",
         "c8": "11.0.0",
-        "eslint": "10.2.0",
+        "eslint": "10.2.1",
         "eslint-config-prettier": "10.1.8",
-        "globals": "17.4.0",
+        "globals": "17.5.0",
         "libbase64": "1.3.0",
-        "libmime": "5.3.7",
+        "libmime": "5.3.8",
         "libqp": "2.1.1",
-        "nodemailer-ntlm-auth": "1.0.4",
-        "prettier": "3.8.1",
+        "prettier": "3.8.3",
         "proxy": "1.0.2",
         "proxy-test-server": "1.0.0",
-        "smtp-server": "3.18.3"
+        "smtp-server": "3.18.4"
     },
@@ -46,0 +45,0 @@ "engines": {

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

542960

0.11%

Dev dependency count

13

-7.14%

Lines of code

12623

0.03%

No dependency changes