ci: bump nodemailer from 9.1.1 to 10.0.2 by dependabot[bot] · Pull Request #1766 · credebl/platform

dependabot · 2026-09-29T05:41:54Z

Bumps nodemailer from 9.1.1 to 10.0.2.

Release notes

v10.0.2

10.0.2 (2026-09-09)

Bug Fixes

mime-node: flatten nested recipient arrays without recursion (ebe0849)

shared: keep the TLS server name out of the DNS cache (a6512db)

v10.0.1

10.0.1 (2026-09-07)

Bug Fixes

types: accept an explicit undefined for optional properties (209719d), closes #1853

types: drop the internal members from the published declarations (81e64ea)

v10.0.0

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

keep the @types/nodemailer type layout working (1cc5356)

migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

apply the other keys of a configuration object next to its url (29610f9)

dkim: canonicalize raw messages the way verifiers do (2c84b11)

keep a transporter assignable to the plain Transporter type (8bf55fb)

shared: keep a colon in the user name of a connection or proxy url (6acf4b6)

shared: refuse URL hosts the legacy parser would truncate (17a5068)

shared: resolve hostnames when the runtime has no interface table (8b03240)

smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)

smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)

smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)

well-known: keep nodemailer/lib/well-known/services.json available (367730c)

Changelog

Sourced from nodemailer's changelog.

10.0.2 (2026-09-09)

Bug Fixes

mime-node: flatten nested recipient arrays without recursion (ebe0849)

shared: keep the TLS server name out of the DNS cache (a6512db)

10.0.1 (2026-09-07)

Bug Fixes

types: accept an explicit undefined for optional properties (209719d), closes #1853

types: drop the internal members from the published declarations (81e64ea)

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

keep the @types/nodemailer type layout working (1cc5356)

migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

apply the other keys of a configuration object next to its url (29610f9)

dkim: canonicalize raw messages the way verifiers do (2c84b11)

keep a transporter assignable to the plain Transporter type (8bf55fb)

shared: keep a colon in the user name of a connection or proxy url (6acf4b6)

shared: refuse URL hosts the legacy parser would truncate (17a5068)

shared: resolve hostnames when the runtime has no interface table (8b03240)

smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)

smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)

smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)

well-known: keep nodemailer/lib/well-known/services.json available (367730c)

Commits

0195799 chore(master): release 10.0.2 (#1855)
d456fd6 test: resolve the TLS server name test host without a resolver stub
ebe0849 fix(mime-node): flatten nested recipient arrays without recursion
a6512db fix(shared): keep the TLS server name out of the DNS cache
40d5221 chore(master): release 10.0.1 (#1854)
81e64ea fix(types): drop the internal members from the published declarations
c5dba6e chore: turn on exactOptionalPropertyTypes for the type-check
209719d fix(types): accept an explicit undefined for optional properties
2ee030c chore(master): release 10.0.0 (#1852)
8bf55fb fix: keep a transporter assignable to the plain Transporter type
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 7.0.13 to 9.0.1. - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v7.0.13...v9.0.1) --- updated-dependencies: - dependency-name: nodemailer dependency-version: 9.0.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

Signed-off-by: M Abdullah <insights.abdullah@gmail.com>

Fix: successful response for empty attributes when creating shortening URLs

* empty attribute response Signed-off-by: M Abdullah <insights.abdullah@gmail.com> Signed-off-by: Tipu_Singh <tipu.singh@ayanworks.com> * match issuance pattern Signed-off-by: M Abdullah <insights.abdullah@gmail.com> Signed-off-by: Tipu_Singh <tipu.singh@ayanworks.com> --------- Signed-off-by: M Abdullah <insights.abdullah@gmail.com> Signed-off-by: Tipu_Singh <tipu.singh@ayanworks.com> Co-authored-by: M Abdullah <insights.abdullah@gmail.com>

Bumps [body-parser](https://github.com/expressjs/body-parser) from 1.20.5 to 1.20.6. - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.5...1.20.6) --- updated-dependencies: - dependency-name: body-parser dependency-version: 1.20.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [typeorm](https://github.com/typeorm/typeorm) from 0.3.28 to 0.3.31. - [Release notes](https://github.com/typeorm/typeorm/releases) - [Changelog](https://github.com/typeorm/typeorm/blob/0.3.31/CHANGELOG.md) - [Commits](typeorm/typeorm@0.3.28...0.3.31) --- updated-dependencies: - dependency-name: typeorm dependency-version: 0.3.31 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

Bumps redis from 6.2-alpine to 8.0-alpine. --- updated-dependencies: - dependency-name: redis dependency-version: 8.0-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

…redis-8.0-alpine build: bump redis from 6.2-alpine to 8.0-alpine

…-0.3.31 chore(deps): bump typeorm from 0.3.28 to 0.3.31

Bumps [axios](https://github.com/axios/axios) from 0.26.1 to 1.20.0. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v0.26.1...v1.20.0) --- updated-dependencies: - dependency-name: axios dependency-version: 1.20.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Guard all error dereferences in sendError so an undefined argument does not throw a TypeError before the 500 fallback. Add a regression test for service.sendError(undefined). Addresses CodeRabbit feedback on #1742. Signed-off-by: Ajay Jadhav <ajay@ayanworks.com>

@ApiProperty

Address all 7 SonarQube security hotspots reported on main: - typescript:S5332 (2): use https:// in the @ApiProperty examples of configure-base-wallet.dto.ts and update-revocation-registry.dto.ts - githubactions:S7637 (4): pin setup-qemu-action, setup-buildx-action, login-action and build-push-action to full commit SHAs instead of mutable v3/v6 tags - docker:S6470 (1): expand .dockerignore to exclude version control, local env/secrets (agent.env, .env*), build artifacts and docs so the recursive COPY in Dockerfile.seed no longer risks leaking sensitive data Also add a local eslint-disable-next-line camelcase for the intentionally snake-cased revoc_reg_id contract field which was blocking the pre-commit hook. Signed-off-by: Ajay Jadhav <ajay@ayanworks.com>

…first Signed-off-by: shitrerohit <rohit.shitre@ayanworks.com>

…tion fix(invitation): update logic to fetch last invitationDid instead of first

Bumps the minor-actions group with 1 update: [pnpm/action-setup](https://github.com/pnpm/action-setup). Updates `pnpm/action-setup` from 6.0.10 to 6.1.0 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@0977fd9...ea17c68) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.3.0. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@8d2750c...37fe631) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.19.2 to 7.3.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@10e90e3...53b7df9) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [docker/login-action](https://github.com/docker/login-action) from 3.7.0 to 4.6.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@c94ce9f...dbcb813) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.7.0 to 4.3.0. - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@c7c5346...1f40c72) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the patch-updates group with 1 update: [morgan](https://github.com/expressjs/morgan). Updates `morgan` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.12.0...1.12.1) --- updated-dependencies: - dependency-name: morgan dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the minor-actions group with 3 updates: [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/build-push-action](https://github.com/docker/build-push-action). Updates `docker/setup-qemu-action` from 4.3.0 to 4.4.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@1f40c72...9901266) Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@37fe631...f87e599) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@53b7df9...c3c9e26) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [multer](https://github.com/expressjs/multer) from 2.3.0 to 2.4.0. - [Release notes](https://github.com/expressjs/multer/releases) - [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md) - [Commits](expressjs/multer@v2.3.0...v2.4.0) --- updated-dependencies: - dependency-name: multer dependency-version: 2.4.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 9.1.1 to 10.0.2. - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.1.1...v10.0.2) --- updated-dependencies: - dependency-name: nodemailer dependency-version: 10.0.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-29T05:43:06Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 1e5b2080-dce4-47ba-b02a-09b67eed6ffc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-08T00:07:50Z

A newer version of nodemailer exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Signed-off-by: Ajay Jadhav <ajay@ayanworks.com>

I, Ajay Jadhav <ajay@ayanworks.com>, hereby add my Signed-off-by to this commit: d0eee78 Signed-off-by: Ajay Jadhav <ajay@ayanworks.com>

…@ayanworks.com> On behalf of Rinkal Bhojani <rinkal.bhojani@ayanworks.com>, I, Ajay Jadhav <ajay@ayanworks.com>, hereby add my Signed-off-by to this commit: 4c07a82 Signed-off-by: Ajay Jadhav <ajay@ayanworks.com>

sonarqubecloud · 2026-10-18T14:11:18Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sujitaw and others added 30 commits June 16, 2026 13:57

wip

9fdd296

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

comments code rabbit

3043506

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

fix comments

78e89af

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

fix comments

901dfd3

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

fix comments

383aaf4

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

feat: fetch token using role and secret

6a8d21b

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

wip

be08e7c

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

wip

0ae3dc4

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

wip

3f193b3

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

wip

8e5a3a1

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

wip

ff0733a

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

feat: completed implementation on aws

6d63f36

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

merge: latest changes from main

623fe0a

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

fix: sonar cloud issues

2b9b87c

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

fix:code rabbit comments for openbao

1f9c116

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

fix: remove commented code

c90b5ed

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

feat: util files for open bao

8c1dfb7

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

feat: add openbao implementation for sendgrid and smtp

6b61197

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

fix: code rabbit comment on email data caching

8766ac6

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

empty attribute response

6d33404

Signed-off-by: M Abdullah <insights.abdullah@gmail.com>

match issuance pattern

4f31b8d

Signed-off-by: M Abdullah <insights.abdullah@gmail.com>

Merge pull request #1696 from connect-abdullah/fix/url_attributes

ac1e5a1

Fix: successful response for empty attributes when creating shortening URLs

feat/docker files for open bao

6fbc9b1

Signed-off-by: sujitaw <sujit.sutar@ayanworks.com>

build: bump redis from 6.2-alpine to 8.0-alpine

f9ee32d

Bumps redis from 6.2-alpine to 8.0-alpine. --- updated-dependencies: - dependency-name: redis dependency-version: 8.0-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #1704 from credebl/dependabot/docker_compose/main/…

74698a4

…redis-8.0-alpine build: bump redis from 6.2-alpine to 8.0-alpine

Merge pull request #1703 from credebl/dependabot/npm_and_yarn/typeorm…

5ad797e

…-0.3.31 chore(deps): bump typeorm from 0.3.28 to 0.3.31

dependabot Bot and others added 14 commits September 12, 2026 18:15

fix(invitation): update logic to fetch last invitationDid instead of …

f0a2891

…first Signed-off-by: shitrerohit <rohit.shitre@ayanworks.com>

Merge pull request #1760 from credebl/fix/changes-in-fetch-oob-invita…

8aa90dc

…tion fix(invitation): update logic to fetch last invitationDid instead of first

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 29, 2026

ajile-in requested review from ajile-in and ankita-p17 September 29, 2026 19:27

ajile-in force-pushed the main branch from 3046294 to 1cb18b7 Compare October 6, 2026 09:18

Merge branch 'main' into dependabot/npm_and_yarn/nodemailer-10.0.2

3fa4b8f

Signed-off-by: Ajay Jadhav <ajay@ayanworks.com>

ajile-in approved these changes Oct 18, 2026

View reviewed changes

ajile-in added 2 commits October 18, 2026 19:40

DCO Remediation Commit for Ajay Jadhav <ajay@ayanworks.com>

e442640

I, Ajay Jadhav <ajay@ayanworks.com>, hereby add my Signed-off-by to this commit: d0eee78 Signed-off-by: Ajay Jadhav <ajay@ayanworks.com>

ajile-in merged commit 672a1d7 into main Oct 18, 2026
9 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/nodemailer-10.0.2 branch October 18, 2026 14:13

Navigation Menu

Repository navigation

ci: bump nodemailer from 9.1.1 to 10.0.2 - #1766

ci: bump nodemailer from 9.1.1 to 10.0.2#1766
ajile-in merged 89 commits into
mainfrom
dependabot/npm_and_yarn/nodemailer-10.0.2

dependabot Bot commented on behalf of github Sep 29, 2026

Uh oh!

coderabbitai Bot commented Sep 29, 2026 •

edited

Loading

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 8, 2026

Uh oh!

sonarqubecloud Bot commented Oct 18, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Conversation

dependabot Bot commented on behalf of github Sep 29, 2026

v10.0.2

10.0.2 (2026-09-09)

Bug Fixes

v10.0.1

10.0.1 (2026-09-07)

Bug Fixes

v10.0.0

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Features

Bug Fixes

10.0.2 (2026-09-09)

Bug Fixes

10.0.1 (2026-09-07)

Bug Fixes

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

Features

Bug Fixes

Uh oh!

coderabbitai Bot commented Sep 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 8, 2026

Uh oh!

sonarqubecloud Bot commented Oct 18, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

coderabbitai Bot commented Sep 29, 2026 •

edited

Loading