nodemailer

Features

• Add info.serverMessageId from the final 250 reply

• Add pendingCount() to the SMTP pool

• Make header value encoding public with MimeNode encodeHeaderValue()

• Mark SMTP errors as permanent or transient with err.permanent

Bug Fixes

• Label an ASCII message/rfc822 attachment 7bit instead of 8bit

• Report the recipients an LMTP server refuses after DATA in rejectedErrors

Bug Fixes

• addressparser: apply the unexpected "<" rule outside quotes and comments

• addressparser: bound group nesting at ten levels

• addressparser: drop the obsolete route from an angle-addr

• addressparser: end a comment only at the ")" that closes the outermost one

• addressparser: honour quoted strings and comments inside an angle-addr and a group

• addressparser: never read a mailbox out of a comment

• addressparser: read CFWS beside the "@" of an addr-spec as nothing

• addressparser: read the first addr-spec of the display text

• Split a domain literal off at the "@" in front of it

Features

• Harden message streams, SMTP connections and the connection pool

Bug Fixes

• Do not read the environment or the interface table on import

• End the SMTP session on any 421 reply and drive the envelope through one step

• Keep ERR_ACCESS_DENIED from the Node.js permission model

• Let the proxy handshake and the SMTP connection share one deadline

• mime-node: decode an SMTPUTF8 domain from its A-label form

• mime-node: finish an encoded part only after its output was read

• qp: encode a lone CR or LF in binary quoted-printable parts

• smtp-connection: count the wait for the greeting against connectionTimeout

• smtp-connection: drop the connection when DATA is taken after a refused sender

• smtp-connection: refuse a second connect() call

• Turn Nagle off for SMTP sockets and report an early sendmail exit as such

Performance Improvements

• Encode base64 and quoted-printable without per-chunk delays

Bug Fixes

• addressparser: keep a quoted display name that holds no "@" out of the address

• addressparser: keep the group recursion depth out of the options object

• addressparser: stop a "[" from hiding the operators after it

• dkim: trim a header field name in linear time

• mime-funcs: read and write header parameters per rfc2045 and rfc2231

• Search only the new bytes for the end of the proxy CONNECT response

Bug Fixes

• fetch: report a form body that can not be encoded through the returned stream

• Keep the CommonJS entry point and the services subpath compatible with the pre-TypeScript build

• qp: keep wrap() terminating for short line lengths and a trailing incomplete escape

• smtp-connection: fail a password login cleanly when the server offers only XOAUTH2

• types: restore the layout of @types/nodemailer in the bundled declarations

Bug Fixes

• mime-funcs: do not double encode Buffer input when chunking base64 mime words

• mime-node: keep a boundary that is only line breaks from stripping to empty

• mime-node: strip line breaks from multipart boundary material

• smtp-pool: release rate-limited connections on close

Bug Fixes

• fetch: scope a cookie without a Path to the RFC 6265 default path

• fetch: send cookies set with Path back to the exact path

• mail-composer: keep httpHeaders and tls for href alternatives and icalEvent

• Resolve well-known services by their primary domains

• ses-transport: throw a configuration error when the SES client is missing

Breaking changes

• breaking

  Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

• Keep the @types/nodemailer type layout working

• Migrate to TypeScript with ES module and CommonJS builds

Bug Fixes

• Apply the other keys of a configuration object next to its url

• dkim: canonicalize raw messages the way verifiers do

• Keep a transporter assignable to the plain Transporter type

• shared: keep a colon in the user name of a connection or proxy url

• shared: refuse URL hosts the legacy parser would truncate

• shared: resolve hostnames when the runtime has no interface table

• smtp-connection: clear the timers of a connection dropped before the greeting

• smtp-connection: keep an incomplete server reply out of lastServerResponse

• smtp-pool: free the pool slot when the proxy socket can not be opened

• well-known: keep nodemailer/lib/well-known/services.json available

Features

• mailer: cap recipients per message with maxRecipients

Bug Fixes

• addressparser: handle address lists in linear time

• addressparser: terminate the domain at an RFC 5322 comment

• mime-node: apply UTS-46 mapping when encoding a domain

• mime-node: dedupe envelope recipients in linear time

• mime-node: flatten parsed addresses without concat.apply

• mime-node: keep the recipient dedupe linear across address headers

• mime-node: keep URL delimiters away from the domain mapper

Bug Fixes

• mailer: escape specials in List-* header comments

• mime-funcs: star the continuation key of a restarted parameter line

• mime-node: keep control chars out of header values and msg-id headers

• mime: encode DEL in header parameters and List-* comments

• mime: keep control chars out of the remaining header positions

• mime: normalize an address parsed out of a string as well

• mime: normalize an address so header and envelope agree

• mime: stop a header key callback and the dkim tags from injecting

Bug Fixes

• mime-funcs: do not let an unpaired surrogate consume the next character

• mime-funcs: keep any surrogate pair intact when chunking base64 mime words

• mime-funcs: percent encode unpaired surrogates in header parameter values

• mime-node: escape backslash and quote in the Content-Type name parameter

• mime: encode HT/CR/LF in header parameter values instead of quoting them