@mavogel/awscdk-rootmail 0.1.5 → 0.1.6

package/node_modules/encoding-japanese/index.d.ts

@@ -0,0 +1,102 @@
+// TypeScript declarations originally from DefinitelyTyped
+// Upstream package: @types/encoding-japanese 2.2.1
+// Thanks to the DefinitelyTyped contributors
+// Licensed under the MIT License. See the LICENSE file
+
+export as namespace Encoding;
+
+export type Encoding =
+    | "UTF32"
+    | "UTF16"
+    | "UTF16BE"
+    | "UTF16LE"
+    | "BINARY"
+    | "ASCII"
+    | "JIS"
+    | "UTF8"
+    | "EUCJP"
+    | "SJIS"
+    | "UNICODE"
+    | "AUTO";
+type IntArrayType =
+    | readonly number[]
+    | Uint8Array
+    | Uint16Array
+    | Uint32Array
+    | Int8Array
+    | Int16Array
+    | Int32Array;
+type EncodingDetection = Encoding | false;
+
+export type ConvertOptions =
+    | ConvertStringOptions
+    | ConvertArrayBufferOptions
+    | ConvertArrayOptions
+    | ConvertUnknownOptions;
+
+export interface ConvertStringOptions {
+    to: Encoding;
+    from?: Encoding | undefined;
+    type: "string";
+    fallback?: "html-entity" | "html-entity-hex" | "ignore" | "error";
+    bom?: boolean | string | undefined;
+}
+
+export interface ConvertArrayBufferOptions {
+    to: Encoding;
+    from?: Encoding | undefined;
+    type: "arraybuffer";
+    fallback?: "html-entity" | "html-entity-hex" | "ignore" | "error";
+    bom?: boolean | string | undefined;
+}
+
+export interface ConvertArrayOptions {
+    to: Encoding;
+    from?: Encoding | undefined;
+    type: "array";
+    fallback?: "html-entity" | "html-entity-hex" | "ignore" | "error";
+    bom?: boolean | string | undefined;
+}
+
+export interface ConvertUnknownOptions {
+    to: Encoding;
+    from?: Encoding | undefined;
+    fallback?: "html-entity" | "html-entity-hex" | "ignore" | "error";
+    bom?: boolean | string | undefined;
+}
+
+export function detect(data: IntArrayType | string, encodings?: Encoding | Encoding[]): EncodingDetection;
+export function convert(data: IntArrayType, to: Encoding, from?: Encoding): number[];
+export function convert(data: string, to: Encoding, from?: Encoding): string;
+export function convert(data: IntArrayType | string, options: ConvertStringOptions): string;
+export function convert(data: IntArrayType | string, options: ConvertArrayBufferOptions): Uint16Array;
+export function convert(data: IntArrayType | string, options: ConvertArrayOptions): number[];
+export function convert(data: string, options: ConvertUnknownOptions): string;
+export function convert(data: IntArrayType, options: ConvertUnknownOptions): number[];
+export function urlEncode(data: IntArrayType): string;
+export function urlDecode(data: string): number[];
+export function base64Encode(data: IntArrayType): string;
+export function base64Decode(data: string): number[];
+export function codeToString(data: IntArrayType): string;
+export function stringToCode(data: string): number[];
+export function toHankakuCase(data: readonly number[]): number[];
+export function toHankakuCase(data: string): string;
+export function toZenkakuCase(data: readonly number[]): number[];
+export function toZenkakuCase(data: string): string;
+export function toHiraganaCase(data: readonly number[]): number[];
+export function toHiraganaCase(data: string): string;
+export function toKatakanaCase(data: readonly number[]): number[];
+export function toKatakanaCase(data: string): string;
+export function toHankanaCase(data: readonly number[]): number[];
+export function toHankanaCase(data: string): string;
+export function toZenkanaCase(data: readonly number[]): number[];
+export function toZenkanaCase(data: string): string;
+export function toHankakuSpace(data: readonly number[]): number[];
+export function toHankakuSpace(data: string): string;
+export function toZenkakuSpace(data: readonly number[]): number[];
+export function toZenkakuSpace(data: string): string;
+
+export const version: string;
+export const orders: string[];
+
+export {};

package/node_modules/encoding-japanese/package.json

@@ -1,18 +1,22 @@
 {
   "name": "encoding-japanese",
-  "version": "2.3.0",
-  "description": "Convert and detect character encoding in JavaScript",
+  "version": "2.4.0",
+  "description": "Convert and detect character encodings in JavaScript",
   "main": "src/index.js",
+  "types": "index.d.ts",
   "files": [
     "encoding.js",
     "encoding.min.js",
+    "index.d.ts",
     "src/*"
   ],
   "scripts": {
     "build": "npm run compile && npm run minify",
     "compile": "browserify src/index.js -o encoding.js -s Encoding -p [ bannerify --file src/banner.js ] --no-bundle-external --bare",
     "minify": "uglifyjs encoding.js -o encoding.min.js --comments -c -m -b ascii_only=true,beautify=false",
-    "test": "eslint . && npm run build && mocha tests/test",
+    "lint": "eslint .",
+    "test": "npm run build && npm run test:types && mocha tests/test",
+    "test:types": "tsc --project tsconfig.types.json",
     "watch": "watchify src/index.js -o encoding.js -s Encoding -p [ bannerify --file src/banner.js ] --no-bundle-external --bare --poll=300 -v"
   },
   "engines": {
@@ -29,33 +33,38 @@
   },
   "homepage": "https://github.com/polygonplanet/encoding.js",
   "keywords": [
-    "base64",
+    "encoding",
     "charset",
     "convert",
     "detect",
-    "encoding",
-    "euc-jp",
-    "eucjp",
-    "iconv",
-    "iso-2022-jp",
     "japanese",
+    "iconv",
+    "shift-jis",
+    "cp932",
+    "euc-jp",
     "jis",
-    "shift_jis",
-    "sjis",
+    "utf-8",
     "unicode",
-    "urldecode",
-    "urlencode",
     "utf-16",
-    "utf-32",
-    "utf-8"
+    "base64",
+    "urlencode",
+    "urldecode",
+    "utf8",
+    "shift_jis",
+    "sjis",
+    "eucjp"
   ],
-  "dependencies": {},
   "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@stylistic/eslint-plugin": "^5.10.0",
+    "@types/node": "^26.5.0",
     "bannerify": "^1.0.1",
     "browserify": "^17.0.1",
-    "eslint": "^8.57.0",
+    "eslint": "^10.9.1",
+    "globals": "^17.12.0",
     "mocha": "^11.8.0",
     "package-json-versionify": "^1.0.4",
+    "typescript": "^7.0.2",
     "uglify-js": "^3.19.3",
     "watchify": "^4.0.0"
   },

package/node_modules/encoding-japanese/src/encoding-convert.js

@@ -154,6 +154,17 @@ function SJISToJIS(data) {
       }
       results[results.length] = b1 - 0x80 & 0xFF;
     } else if (b1 >= 0x80) {
+      b2 = data[++i];
+      if (b2 === 0x7F) {
+        if (index !== 0) {
+          index = 0;
+          results[results.length] = esc[0];
+          results[results.length] = esc[1];
+          results[results.length] = esc[2];
+        }
+        results[results.length] = config.FALLBACK_CHARACTER;
+        continue;
+      }
       if (index !== 1) {
         index = 1;
         results[results.length] = esc[3];
@@ -161,7 +172,6 @@ function SJISToJIS(data) {
         results[results.length] = esc[5];
       }
 
-      b2 = data[++i];
       if (sjisExt.hasCP932DuplicateCode(b1)) {
         // Remap CP932 duplicate codes and IBM extended characters
         remapped = sjisExt.remapCP932DuplicateCode(b1, b2);
@@ -228,6 +238,10 @@ function SJISToEUCJP(data) {
       results[results.length] = b1;
     } else if (b1 >= 0x81) {
       b2 = data[++i];
+      if (b2 === 0x7F) {
+        results[results.length] = config.FALLBACK_CHARACTER;
+        continue;
+      }
       if (sjisExt.hasCP932DuplicateCode(b1)) {
         // Remap CP932 duplicate codes and IBM extended characters
         remapped = sjisExt.remapCP932DuplicateCode(b1, b2);
@@ -409,6 +423,10 @@ function SJISToUTF8(data) {
       results[results.length] = u3 & 0xFF;
     } else if (b >= 0x80) {
       b2 = data[++i];
+      if (b2 === 0x7F) {
+        results[results.length] = config.FALLBACK_CHARACTER;
+        continue;
+      }
       if (sjisExt.hasCP932DuplicateCode(b)) {
         // Remap CP932 duplicate codes and IBM extended characters
         remapped = sjisExt.remapCP932DuplicateCode(b, b2);
@@ -642,7 +660,8 @@ function UTF8ToSJIS(data, options) {
                (data[++i] & 0xFF);
       }
 
-      jis = EncodingTable.UTF8_TO_JIS_TABLE[utf8];
+      jis = EncodingTable.UTF8_TO_JIS_TABLE[utf8] ||
+        EncodingTable.UTF8_TO_JIS_ALIAS_TABLE[utf8];
       if (jis == null) {
         if (fallbackOption) {
           handleFallback(results, bytes, fallbackOption);
@@ -653,10 +672,6 @@ function UTF8ToSJIS(data, options) {
         if (jis < 0xFF) {
           results[results.length] = jis + 0x80;
         } else {
-          if (jis > 0x10000) {
-            jis -= 0x10000;
-          }
-
           b1 = jis >> 8;
           b2 = jis & 0xFF;
           if (b1 & 0x01) {
@@ -701,7 +716,7 @@ function UTF8ToEUCJP(data, options) {
   var results = [];
   var i = 0;
   var len = data && data.length;
-  var b, bytes, utf8, jis;
+  var b, bytes, utf8, jis, isJISX0212;
   var fallbackOption = options && options.fallback;
 
   for (; i < len; i++) {
@@ -726,32 +741,28 @@ function UTF8ToEUCJP(data, options) {
                (data[++i] & 0xFF);
       }
 
-      jis = EncodingTable.UTF8_TO_JIS_TABLE[utf8];
       // JIS X 0212 chars duplicated into JIS X 0208 unassigned rows: use the JIS X 0212 form.
-      if (jis != null && EncodingTable.UTF8_TO_JISX0212_TABLE[utf8] != null) {
-        jis = null;
+      jis = EncodingTable.UTF8_TO_JISX0212_TABLE[utf8];
+      isJISX0212 = jis != null;
+
+      if (jis == null) {
+        jis = EncodingTable.UTF8_TO_JIS_TABLE[utf8] ||
+          EncodingTable.UTF8_TO_JIS_ALIAS_TABLE[utf8];
       }
       if (jis == null) {
-        jis = EncodingTable.UTF8_TO_JISX0212_TABLE[utf8];
-        if (jis == null) {
-          if (fallbackOption) {
-            handleFallback(results, bytes, fallbackOption);
-          } else {
-            results[results.length] = config.FALLBACK_CHARACTER;
-          }
+        if (fallbackOption) {
+          handleFallback(results, bytes, fallbackOption);
         } else {
-          results[results.length] = 0x8F;
-          results[results.length] = (jis >> 8) - 0x80 & 0xFF;
-          results[results.length] = (jis & 0xFF) - 0x80 & 0xFF;
+          results[results.length] = config.FALLBACK_CHARACTER;
         }
       } else {
-        if (jis > 0x10000) {
-          jis -= 0x10000;
-        }
         if (jis < 0xFF) {
           results[results.length] = 0x8E;
           results[results.length] = jis - 0x80 & 0xFF;
         } else {
+          if (isJISX0212) {
+            results[results.length] = 0x8F;
+          }
           results[results.length] = (jis >> 8) - 0x80 & 0xFF;
           results[results.length] = (jis & 0xFF) - 0x80 & 0xFF;
         }
@@ -773,7 +784,7 @@ function UTF8ToJIS(data, options) {
   var index = 0;
   var len = data && data.length;
   var i = 0;
-  var b, bytes, utf8, jis;
+  var b, bytes, utf8, jis, isJISX0212;
   var fallbackOption = options && options.fallback;
 
   var esc = [
@@ -813,42 +824,29 @@ function UTF8ToJIS(data, options) {
                (data[++i] & 0xFF);
       }
 
-      jis = EncodingTable.UTF8_TO_JIS_TABLE[utf8];
       // JIS X 0212 chars duplicated into JIS X 0208 unassigned rows: use the JIS X 0212 form.
-      if (jis != null && EncodingTable.UTF8_TO_JISX0212_TABLE[utf8] != null) {
-        jis = null;
+      jis = EncodingTable.UTF8_TO_JISX0212_TABLE[utf8];
+      isJISX0212 = jis != null;
+
+      if (jis == null) {
+        jis = EncodingTable.UTF8_TO_JIS_TABLE[utf8] ||
+          EncodingTable.UTF8_TO_JIS_ALIAS_TABLE[utf8];
       }
+
       if (jis == null) {
-        jis = EncodingTable.UTF8_TO_JISX0212_TABLE[utf8];
-        if (jis == null) {
-          if (index !== 0) {
-            index = 0;
-            results[results.length] = esc[0];
-            results[results.length] = esc[1];
-            results[results.length] = esc[2];
-          }
+        if (index !== 0) {
+          index = 0;
+          results[results.length] = esc[0];
+          results[results.length] = esc[1];
+          results[results.length] = esc[2];
+        }
 
-          if (fallbackOption) {
-            handleFallback(results, bytes, fallbackOption);
-          } else {
-            results[results.length] = config.FALLBACK_CHARACTER;
-          }
+        if (fallbackOption) {
+          handleFallback(results, bytes, fallbackOption);
         } else {
-          // JIS X 0212:1990
-          if (index !== 3) {
-            index = 3;
-            results[results.length] = esc[9];
-            results[results.length] = esc[10];
-            results[results.length] = esc[11];
-            results[results.length] = esc[12];
-          }
-          results[results.length] = jis >> 8 & 0xFF;
-          results[results.length] = jis & 0xFF;
+          results[results.length] = config.FALLBACK_CHARACTER;
         }
       } else {
-        if (jis > 0x10000) {
-          jis -= 0x10000;
-        }
         if (jis < 0xFF) {
           // Halfwidth Katakana
           if (index !== 2) {
@@ -859,7 +857,17 @@ function UTF8ToJIS(data, options) {
           }
           results[results.length] = jis & 0xFF;
         } else {
-          if (index !== 1) {
+          if (isJISX0212) {
+            // JIS X 0212:1990
+            if (index !== 3) {
+              index = 3;
+              results[results.length] = esc[9];
+              results[results.length] = esc[10];
+              results[results.length] = esc[11];
+              results[results.length] = esc[12];
+            }
+          } else if (index !== 1) {
+            // JIS X 0208
             index = 1;
             results[results.length] = esc[3];
             results[results.length] = esc[4];
@@ -933,8 +941,9 @@ function UTF8ToUNICODE(data, options) {
   var i = 0;
   var len = data && data.length;
   var n, c, c2, c3, c4, code;
-  // For internal usage only
-  var ignoreSurrogatePair = options && options.ignoreSurrogatePair;
+  // For internal use only
+  // Returns raw Unicode code points without splitting into surrogate pairs
+  var asCodePoint = options && options.asCodePoint;
 
   while (i < len) {
     c = data[i++];
@@ -970,7 +979,7 @@ function UTF8ToUNICODE(data, options) {
               (c4 & 0x3F);
     }
 
-    if (code <= 0xFFFF || ignoreSurrogatePair) {
+    if (code <= 0xFFFF || asCodePoint) {
       results[results.length] = code;
     } else {
       // Split in surrogate halves
@@ -1685,7 +1694,7 @@ function handleFallback(results, bytes, fallbackOption) {
   switch (fallbackOption) {
     case 'html-entity':
     case 'html-entity-hex':
-      var unicode = UTF8ToUNICODE(bytes, { ignoreSurrogatePair: true })[0];
+      var unicode = UTF8ToUNICODE(bytes, { asCodePoint: true })[0];
       if (unicode) {
         results[results.length] = 0x26; // &
         results[results.length] = 0x23; // #

package/node_modules/encoding-japanese/src/encoding-table.js

@@ -1,4 +1,5 @@
 exports.UTF8_TO_JIS_TABLE = require('./utf8-to-jis-table');
+exports.UTF8_TO_JIS_ALIAS_TABLE = require('./utf8-to-jis-alias-table');
 exports.UTF8_TO_JISX0212_TABLE = require('./utf8-to-jisx0212-table');
 exports.JIS_TO_UTF8_TABLE = require('./jis-to-utf8-table');
 exports.JISX0212_TO_UTF8_TABLE = require('./jisx0212-to-utf8-table');

package/node_modules/encoding-japanese/src/index.js

@@ -503,7 +503,7 @@ var Encoding = {
     var i = 0;
     var c, code, next;
 
-    for (i = 0; i < len; i++) {
+    for (; i < len; i++) {
       c = data[i];
       // Hankaku katakana
       if (c > 0xFF60 && c < 0xFFA0) {

package/node_modules/encoding-japanese/src/kana-case-table.js

@@ -1,4 +1,4 @@
-/* eslint-disable key-spacing */
+/* eslint-disable @stylistic/key-spacing */
 /**
  * Katakana table
  */

package/node_modules/encoding-japanese/src/utf8-to-jis-alias-table.js

@@ -0,0 +1,14 @@
+/**
+ * Encoding conversion table for UTF-8 to JIS (encode only)
+ *
+ * Accepts Unicode characters that differ between CP932 and JIS X 0208 mappings
+ * (e.g., WAVE DASH vs. FULLWIDTH TILDE).
+ *
+ * { UTF-8 : JIS }
+ */
+module.exports = {
+  0xE28892: 0x215D, // − U+2212 MINUS SIGN same cell as － U+FF0D (0xEFBC8D) -> SJIS 0x817C
+  0xE3809C: 0x2141, // 〜 U+301C WAVE DASH same cell as ～ U+FF5E (0xEFBD9E) -> SJIS 0x8160
+  0xC2A2: 0x2171,   // ¢ U+00A2 CENT SIGN  same cell as ￠ U+FFE0 (0xEFBFA0) -> SJIS 0x8191
+  0xC2A3: 0x2172    // £ U+00A3 POUND SIGN same cell as ￡ U+FFE1 (0xEFBFA1) -> SJIS 0x8192
+};

package/node_modules/encoding-japanese/src/utf8-to-jis-table.js

@@ -1,6 +1,7 @@
-/* eslint-disable indent,key-spacing */
+/* eslint-disable @stylistic/indent, @stylistic/key-spacing */
 /**
  * Encoding conversion table for UTF-8 to JIS
+ * { UTF-8 : JIS }
  */
 module.exports = {
 0xEFBDA1:0x21,0xEFBDA2:0x22,0xEFBDA3:0x23,0xEFBDA4:0x24,0xEFBDA5:0x25,
@@ -1486,8 +1487,8 @@ module.exports = {
 0xE285B5:0x7C76,0xE285B6:0x7C77,0xE285B7:0x7C78,0xE285B8:0x7C79,0xE285B9:0x7C7A,
 0xEFBFA4:0x7C7C,0xEFBC87:0x7C7D,0xEFBC82:0x7C7E,
 
-//FIXME: mojibake
-0xE288A5:0x2142,
-0xEFBFA2:0x224C,
-0xE28892:0x1215D
+// Remaps Unicode characters that differ between CP932 and JIS X 0208 mappings
+// (encode and decode) See also `utf8-to-jis-alias-table.js`
+0xE288A5:0x2142, // ∥ U+2225 PARALLEL TO        same cell as ‖ U+2016 (0xE28096) -> SJIS 0x8161
+0xEFBFA2:0x224C  // ￢ U+FFE2 FULLWIDTH NOT SIGN same cell as ¬ U+00AC (0xC2AC)   -> SJIS 0x81CA
 };

package/node_modules/encoding-japanese/src/utf8-to-jisx0212-table.js

@@ -1,6 +1,11 @@
-/* eslint-disable indent,key-spacing */
+/* eslint-disable @stylistic/indent,@stylistic/key-spacing */
 /**
  * Encoding conversion table for UTF-8 to JIS X 0212:1990 (Hojo-Kanji)
+ *
+ * Character mappings based on:
+ * https://www.unicode.org/Public/MAPPINGS/OBSOLETE/EASTASIA/JIS/JIS0212.TXT
+ * Keys have been converted to UTF-8
+ * { UTF-8 : JIS }
  */
 module.exports = {
 0xCB98:0x222F,0xCB87:0x2230,0xC2B8:0x2231,0xCB99:0x2232,0xCB9D:0x2233,
@@ -1217,8 +1222,5 @@ module.exports = {
 0xE9BDB1:0x6D53,0xE9BDB3:0x6D54,0xE9BDB5:0x6D55,0xE9BDBA:0x6D56,0xE9BDBD:0x6D57,
 0xE9BE8F:0x6D58,0xE9BE90:0x6D59,0xE9BE91:0x6D5A,0xE9BE92:0x6D5B,0xE9BE94:0x6D5C,
 0xE9BE96:0x6D5D,0xE9BE97:0x6D5E,0xE9BE9E:0x6D5F,0xE9BEA1:0x6D60,0xE9BEA2:0x6D61,
-0xE9BEA3:0x6D62,0xE9BEA5:0x6D63,
-
-//FIXME: mojibake
-0xE3809C:0x2141
+0xE9BEA3:0x6D62,0xE9BEA5:0x6D63
 };

package/node_modules/libmime/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [5.4.4](https://github.com/nodemailer/libmime/compare/v5.4.3...v5.4.4) (2026-09-15)
+
+
+### Bug Fixes
+
+* **deps:** update encoding-japanese to 2.4.0 ([047a9d6](https://github.com/nodemailer/libmime/commit/047a9d6403775575305cb5d9807c95d2c5587607))
+
 ## [5.4.3](https://github.com/nodemailer/libmime/compare/v5.4.2...v5.4.3) (2026-08-31)
 
 

package/node_modules/libmime/package.json

@@ -1,7 +1,7 @@
 {
     "name": "libmime",
     "description": "Encode and decode quoted printable and base64 strings",
-    "version": "5.4.3",
+    "version": "5.4.4",
     "main": "lib/libmime.js",
     "files": [
         "lib",
@@ -24,7 +24,7 @@
         "update": "rm -rf node_modules package-lock.json && ncu -u && npm install"
     },
     "dependencies": {
-        "encoding-japanese": "2.3.0",
+        "encoding-japanese": "2.4.0",
         "iconv-lite": "0.7.3",
         "libbase64": "1.3.0",
         "libqp": "2.1.1"

package/node_modules/mailparser/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-    ".": "3.9.26"
+    ".": "3.9.28"
 }

package/node_modules/mailparser/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [3.9.28](https://github.com/nodemailer/mailparser/compare/v3.9.27...v3.9.28) (2026-09-15)
+
+
+### Bug Fixes
+
+* **deps:** update libmime to 5.4.4 and mailsplit to 5.4.17 ([8da897f](https://github.com/nodemailer/mailparser/commit/8da897ffb961f6967f57851131ee37600842afca))
+
+## [3.9.27](https://github.com/nodemailer/mailparser/compare/v3.9.26...v3.9.27) (2026-09-15)
+
+
+### Bug Fixes
+
+* **deps:** update nodemailer to 10.0.10, encoding-japanese to 2.4.0 ([842904f](https://github.com/nodemailer/mailparser/commit/842904f1df3e2b1b1f07ad108575806efbcc55b5))
+
 ## [3.9.26](https://github.com/nodemailer/mailparser/compare/v3.9.25...v3.9.26) (2026-09-12)
 
 

package/node_modules/mailparser/package.json

@@ -1,6 +1,6 @@
 {
     "name": "mailparser",
-    "version": "3.9.26",
+    "version": "3.9.28",
     "description": "Parse e-mails",
     "main": "index.js",
     "scripts": {
@@ -18,14 +18,14 @@
     ],
     "license": "MIT",
     "dependencies": {
-        "encoding-japanese": "2.3.0",
+        "encoding-japanese": "2.4.0",
         "he": "1.2.0",
         "html-to-text": "10.0.1",
         "iconv-lite": "0.7.3",
-        "libmime": "5.4.3",
+        "libmime": "5.4.4",
         "linkify-it": "5.0.2",
-        "@zone-eu/mailsplit": "5.4.16",
-        "nodemailer": "10.0.9",
+        "@zone-eu/mailsplit": "5.4.17",
+        "nodemailer": "10.0.10",
         "punycode.js": "2.3.1",
         "tlds": "1.261.0"
     },

package/node_modules/nodemailer/CHANGELOG.md

@@ -1,5 +1,14 @@
 # CHANGELOG
 
+## [10.0.10](https://github.com/nodemailer/nodemailer/compare/v10.0.9...v10.0.10) (2026-09-14)
+
+
+### Bug Fixes
+
+* derive the attachment filename from the basename of a Windows path ([c7cc7ce](https://github.com/nodemailer/nodemailer/commit/c7cc7ce41a3602441747476a2a2c4a8ff466a83e))
+* **dkim:** unfold folded header lines in linear time ([28a5909](https://github.com/nodemailer/nodemailer/commit/28a5909cec27646cb001dc7e97a8f5d26c973078))
+* **smtp-connection:** reassemble multiline replies in linear time ([f2d82fa](https://github.com/nodemailer/nodemailer/commit/f2d82fa84d47015a7bbb4253da61eeb778c658b1))
+
 ## [10.0.9](https://github.com/nodemailer/nodemailer/compare/v10.0.8...v10.0.9) (2026-09-12)
 
 

package/node_modules/nodemailer/dist/cjs/dkim/message-parser.js

@@ -126,11 +126,18 @@ class MessageParser extends node_stream_1.Transform {
         // signature covers exactly the bytes the receiving side canonicalizes
         // Only SP and HTAB fold a line, and only they are trimmed from the field name, the
         // same whitespace the relaxed canonicalization in sign.ts works with
-        const lines = (this.rawHeaders || Buffer.alloc(0)).toString('binary').split(/\r?\n/);
-        for (let i = lines.length - 1; i > 0; i--) {
-            if (/^[ \t]/.test(lines[i])) {
-                lines[i - 1] += '\n' + lines[i];
-                lines.splice(i, 1);
+        const rawLines = (this.rawHeaders || Buffer.alloc(0)).toString('binary').split(/\r?\n/);
+        // Unfold in a single forward pass and only ever test a freshly split line for the
+        // continuation prefix. Testing an already merged line instead would rescan a string
+        // that grows with every continuation line, so a header folded into many continuation
+        // lines (a large recipient list, for example) would take quadratic time to unfold
+        const lines = [];
+        for (const rawLine of rawLines) {
+            if (lines.length && /^[ \t]/.test(rawLine)) {
+                lines[lines.length - 1] += '\n' + rawLine;
+            }
+            else {
+                lines.push(rawLine);
             }
         }
         return lines

package/node_modules/nodemailer/dist/cjs/mail-composer/index.js

@@ -151,8 +151,10 @@ class MailComposer {
                 data.filename = attachment.filename;
             }
             else if (!isMessageNode && attachment.filename !== false) {
+                // a backslash separates as well, so a Windows path does not put the sender's directories in the headers
                 data.filename =
-                    (attachment.path || attachment.href || '').split('/').pop().split('?').shift() || 'attachment-' + (i + 1);
+                    (attachment.path || attachment.href || '').split(/[/\\]/).pop().split('?').shift() ||
+                        'attachment-' + (i + 1);
                 if (data.filename.indexOf('.') < 0) {
                     data.filename += '.' + mimeFuncs.detectExtension(data.contentType);
                 }

package/node_modules/nodemailer/dist/cjs/mailer/mail-message.js

@@ -107,8 +107,9 @@ class MailMessage {
         if (this.data.attachments && this.data.attachments.length) {
             this.data.attachments.forEach((attachment, i) => {
                 if (!attachment.filename) {
+                    // a backslash separates as well, so a Windows path does not put the sender's directories in the headers
                     attachment.filename =
-                        (attachment.path || attachment.href || '').split('/').pop().split('?').shift() ||
+                        (attachment.path || attachment.href || '').split(/[/\\]/).pop().split('?').shift() ||
                             'attachment-' + (i + 1);
                     if (attachment.filename.indexOf('.') < 0) {
                         attachment.filename += '.' + mimeFuncs.detectExtension(attachment.contentType);

package/node_modules/nodemailer/dist/cjs/package-info.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "nodemailer";
-export declare const version = "10.0.9";
+export declare const version = "10.0.10";
 export declare const homepage = "https://nodemailer.com/";