@nocobase/plugin-workflow-mailer 2.2.20 → 2.2.21

package/dist/node_modules/nodemailer/{lib → dist/esm}/xoauth2/index.js

@@ -1,11 +1,8 @@
-'use strict';
-
-const { Stream } = require('stream');
-const nmfetch = require('../fetch');
-const crypto = require('crypto');
-const shared = require('../shared');
-const errors = require('../errors');
-
+import { Stream } from 'node:stream';
+import nmfetch from '../fetch/index.js';
+import crypto from 'node:crypto';
+import * as shared from '../shared/index.js';
+import * as errors from '../errors.js';
 /**
  * XOAUTH2 access_token generator for Gmail.
  * Create client ID for web applications in Google API console to use it.
@@ -22,152 +19,123 @@ const errors = require('../errors');
  * If provisionCallback is used, then Nodemailer does not try to attempt generating the token by itself
  *
  * @constructor
- * @param {Object} options Client information for token generation
- * @param {String} options.user User e-mail address
- * @param {String} options.clientId Client ID value
- * @param {String} options.clientSecret Client secret value
- * @param {String} options.refreshToken Refresh token for an user
- * @param {String} options.accessUrl Endpoint for token generation, defaults to 'https://accounts.google.com/o/oauth2/token'
- * @param {String} options.accessToken An existing valid accessToken
- * @param {String} options.privateKey Private key for JSW
- * @param {Number} options.expires Optional Access Token expire time in ms
- * @param {Number} options.timeout Optional TTL for Access Token in seconds
- * @param {Function} options.provisionCallback Function to run when a new access token is required
- * @param {Object} options.tls Optional TLS options forwarded to the HTTPS token request. Defaults to strict cert validation; supply { rejectUnauthorized: false } only for self-hosted OAuth providers on private CAs.
+ * @param options Client information for token generation
+ * @param options.user User e-mail address
+ * @param options.clientId Client ID value
+ * @param options.clientSecret Client secret value
+ * @param options.refreshToken Refresh token for an user
+ * @param options.accessUrl Endpoint for token generation, defaults to 'https://accounts.google.com/o/oauth2/token'
+ * @param options.accessToken An existing valid accessToken
+ * @param options.privateKey Private key for JSW
+ * @param options.expires Optional Access Token expire time in ms
+ * @param options.timeout Optional TTL for Access Token in seconds
+ * @param options.provisionCallback Function to run when a new access token is required
+ * @param options.tls Optional TLS options forwarded to the HTTPS token request. Defaults to strict cert validation; supply { rejectUnauthorized: false } only for self-hosted OAuth providers on private CAs.
  */
 class XOAuth2 extends Stream {
     constructor(options, logger) {
         super();
-
         this.options = options || {};
-
+        this.configError = false;
         if (options && options.serviceClient) {
             if (!options.privateKey || !options.user) {
+                // reported through getToken() rather than an 'error' event: the transports forward
+                // that event up to the Mail object, where nothing may be listening
                 const err = new Error('Options "privateKey" and "user" are required for service account!');
                 err.code = errors.EOAUTH2;
-                setImmediate(() => this.emit('error', err));
-                return;
+                this.configError = err;
             }
-
             const serviceRequestTimeout = Math.min(Math.max(Number(this.options.serviceRequestTimeout) || 0, 0), 3600);
             this.options.serviceRequestTimeout = serviceRequestTimeout || 5 * 60;
         }
-
-        this.logger = shared.getLogger(
-            {
-                logger
-            },
-            {
-                component: this.options.component || 'OAuth2'
-            }
-        );
-
+        this.logger = shared.getLogger({
+            logger
+        }, {
+            component: this.options.component || 'OAuth2'
+        });
         this.provisionCallback = typeof this.options.provisionCallback === 'function' ? this.options.provisionCallback : false;
-
         this.options.accessUrl = this.options.accessUrl || 'https://accounts.google.com/o/oauth2/token';
         this.options.customHeaders = this.options.customHeaders || {};
         this.options.customParams = this.options.customParams || {};
-
         this.accessToken = this.options.accessToken || false;
-
         if (this.options.expires && Number(this.options.expires)) {
             this.expires = this.options.expires;
-        } else {
+        }
+        else {
             const timeout = Math.max(Number(this.options.timeout) || 0, 0);
             this.expires = (timeout && Date.now() + timeout * 1000) || 0;
         }
-
         this.renewing = false; // Track if renewal is in progress
         this.renewalQueue = []; // Queue for pending requests during renewal
     }
-
     /**
      * Returns or generates (if previous has expired) a XOAuth2 token
      *
-     * @param {Boolean} renew If false then use cached access token (if available)
-     * @param {Function} callback Callback function with error object and token string
+     * @param renew If false then use cached access token (if available)
+     * @param callback Callback function with error object and token string
      */
     getToken(renew, callback) {
+        // the error paths hand over the error alone
+        const done = callback;
+        if (this.configError) {
+            return done(this.configError);
+        }
         if (!renew && this.accessToken && (!this.expires || this.expires > Date.now())) {
-            this.logger.debug(
-                {
-                    tnx: 'OAUTH2',
-                    user: this.options.user,
-                    action: 'reuse'
-                },
-                'Reusing existing access token for %s',
-                this.options.user
-            );
+            this.logger.debug({
+                tnx: 'OAUTH2',
+                user: this.options.user,
+                action: 'reuse'
+            }, 'Reusing existing access token for %s', this.options.user);
             return callback(null, this.accessToken);
         }
-
         // check if it is possible to renew, if not, return the current token or error
         if (!this.provisionCallback && !this.options.refreshToken && !this.options.serviceClient) {
             if (this.accessToken) {
-                this.logger.debug(
-                    {
-                        tnx: 'OAUTH2',
-                        user: this.options.user,
-                        action: 'reuse'
-                    },
-                    'Reusing existing access token (no refresh capability) for %s',
-                    this.options.user
-                );
-                return callback(null, this.accessToken);
-            }
-            this.logger.error(
-                {
+                this.logger.debug({
                     tnx: 'OAUTH2',
                     user: this.options.user,
-                    action: 'renew'
-                },
-                'Cannot renew access token for %s: No refresh mechanism available',
-                this.options.user
-            );
+                    action: 'reuse'
+                }, 'Reusing existing access token (no refresh capability) for %s', this.options.user);
+                return callback(null, this.accessToken);
+            }
+            this.logger.error({
+                tnx: 'OAUTH2',
+                user: this.options.user,
+                action: 'renew'
+            }, 'Cannot renew access token for %s: No refresh mechanism available', this.options.user);
             const err = new Error("Can't create new access token for user");
             err.code = errors.EOAUTH2;
-            return callback(err);
+            return done(err);
         }
-
         // If renewal already in progress, queue this request instead of starting another
         if (this.renewing) {
-            return this.renewalQueue.push({ renew, callback });
+            this.renewalQueue.push({ renew, callback: done });
+            return;
         }
-
         this.renewing = true;
-
         // Handles token renewal completion - processes queued requests and cleans up
         const generateCallback = (err, accessToken) => {
             this.renewalQueue.forEach(item => item.callback(err, accessToken));
             this.renewalQueue = [];
             this.renewing = false;
-
             if (err) {
-                this.logger.error(
-                    {
-                        err,
-                        tnx: 'OAUTH2',
-                        user: this.options.user,
-                        action: 'renew'
-                    },
-                    'Failed generating new Access Token for %s',
-                    this.options.user
-                );
-            } else {
-                this.logger.info(
-                    {
-                        tnx: 'OAUTH2',
-                        user: this.options.user,
-                        action: 'renew'
-                    },
-                    'Generated new Access Token for %s',
-                    this.options.user
-                );
+                this.logger.error({
+                    err,
+                    tnx: 'OAUTH2',
+                    user: this.options.user,
+                    action: 'renew'
+                }, 'Failed generating new Access Token for %s', this.options.user);
+            }
+            else {
+                this.logger.info({
+                    tnx: 'OAUTH2',
+                    user: this.options.user,
+                    action: 'renew'
+                }, 'Generated new Access Token for %s', this.options.user);
             }
             // Complete original request
-            callback(err, accessToken);
+            done(err, accessToken);
         };
-
         if (this.provisionCallback) {
             this.provisionCallback(this.options.user, !!renew, (err, accessToken, expires) => {
                 if (!err && accessToken) {
@@ -176,16 +144,16 @@ class XOAuth2 extends Stream {
                 }
                 generateCallback(err, accessToken);
             });
-        } else {
+        }
+        else {
             this.generateToken(generateCallback);
         }
     }
-
     /**
      * Updates token values
      *
-     * @param {String} accessToken New access token
-     * @param {Number} timeout Access token lifetime in seconds
+     * @param accessToken New access token
+     * @param timeout Access token lifetime in seconds
      *
      * Emits 'token': { user: User email-address, accessToken: the new accessToken, timeout: TTL in seconds}
      */
@@ -193,20 +161,20 @@ class XOAuth2 extends Stream {
         this.accessToken = accessToken;
         timeout = Math.max(Number(timeout) || 0, 0);
         this.expires = (timeout && Date.now() + timeout * 1000) || 0;
-
         this.emit('token', {
             user: this.options.user,
             accessToken: accessToken || '',
             expires: this.expires
         });
     }
-
     /**
      * Generates a new XOAuth2 token with the credentials provided at initialization
      *
-     * @param {Function} callback Callback function with error object and token string
+     * @param callback Callback function with error object and token string
      */
     generateToken(callback) {
+        // the error paths hand over the error alone
+        const done = callback;
         let urlOptions;
         let loggedUrlOptions;
         if (this.options.serviceClient) {
@@ -223,28 +191,27 @@ class XOAuth2 extends Stream {
             let token;
             try {
                 token = this.jwtSignRS256(tokenData);
-            } catch (_err) {
+            }
+            catch (_err) {
                 const err = new Error("Can't generate token. Check your auth options");
                 err.code = errors.EOAUTH2;
-                return callback(err);
+                return done(err);
             }
-
             urlOptions = {
                 grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
                 assertion: token
             };
-
             loggedUrlOptions = {
                 grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
                 assertion: tokenData
             };
-        } else {
+        }
+        else {
             if (!this.options.refreshToken) {
                 const err = new Error("Can't create new access token for user");
                 err.code = errors.EOAUTH2;
-                return callback(err);
+                return done(err);
             }
-
             // web app - https://developers.google.com/identity/protocols/OAuth2WebServer
             urlOptions = {
                 client_id: this.options.clientId || '',
@@ -252,7 +219,6 @@ class XOAuth2 extends Stream {
                 refresh_token: this.options.refreshToken,
                 grant_type: 'refresh_token'
             };
-
             loggedUrlOptions = {
                 client_id: this.options.clientId || '',
                 client_secret: (this.options.clientSecret || '').substr(0, 6) + '...',
@@ -260,63 +226,43 @@ class XOAuth2 extends Stream {
                 grant_type: 'refresh_token'
             };
         }
-
         Object.assign(urlOptions, this.options.customParams);
         Object.assign(loggedUrlOptions, this.options.customParams);
-
-        this.logger.debug(
-            {
-                tnx: 'OAUTH2',
-                user: this.options.user,
-                action: 'generate'
-            },
-            'Requesting token using: %s',
-            JSON.stringify(loggedUrlOptions)
-        );
-
+        this.logger.debug({
+            tnx: 'OAUTH2',
+            user: this.options.user,
+            action: 'generate'
+        }, 'Requesting token using: %s', JSON.stringify(loggedUrlOptions));
         this.postRequest(this.options.accessUrl, urlOptions, this.options, (error, body) => {
             let data;
-
             if (error) {
-                return callback(error);
+                return done(error);
             }
-
             try {
                 data = JSON.parse(body.toString());
-            } catch (E) {
-                return callback(E);
             }
-
+            catch (E) {
+                return done(E);
+            }
             if (!data || typeof data !== 'object') {
-                this.logger.debug(
-                    {
-                        tnx: 'OAUTH2',
-                        user: this.options.user,
-                        action: 'post'
-                    },
-                    'Response: %s',
-                    (body || '').toString()
-                );
+                this.logger.debug({
+                    tnx: 'OAUTH2',
+                    user: this.options.user,
+                    action: 'post'
+                }, 'Response: %s', (body || '').toString());
                 const err = new Error('Invalid authentication response');
                 err.code = errors.EOAUTH2;
-                return callback(err);
+                return done(err);
             }
-
             const logData = Object.assign({}, data);
             if (logData.access_token) {
                 logData.access_token = (logData.access_token || '').toString().substr(0, 6) + '...';
             }
-
-            this.logger.debug(
-                {
-                    tnx: 'OAUTH2',
-                    user: this.options.user,
-                    action: 'post'
-                },
-                'Response: %s',
-                JSON.stringify(logData)
-            );
-
+            this.logger.debug({
+                tnx: 'OAUTH2',
+                user: this.options.user,
+                action: 'post'
+            }, 'Response: %s', JSON.stringify(logData));
             if (data.error) {
                 // Error Response : https://tools.ietf.org/html/rfc6749#section-5.2
                 let errorMessage = data.error;
@@ -328,57 +274,54 @@ class XOAuth2 extends Stream {
                 }
                 const err = new Error(errorMessage);
                 err.code = errors.EOAUTH2;
-                return callback(err);
+                return done(err);
             }
-
             if (data.access_token) {
                 this.updateToken(data.access_token, data.expires_in);
                 return callback(null, this.accessToken);
             }
-
             const err = new Error('No access token');
             err.code = errors.EOAUTH2;
-            return callback(err);
+            return done(err);
         });
     }
-
     /**
      * Converts an access_token and user id into a base64 encoded XOAuth2 token
      *
-     * @param {String} [accessToken] Access token string
-     * @return {String} Base64 encoded token for IMAP or SMTP login
+     * @param [accessToken] Access token string
+     * @return Base64 encoded token for IMAP or SMTP login
      */
     buildXOAuth2Token(accessToken) {
         const authData = ['user=' + (this.options.user || ''), 'auth=Bearer ' + (accessToken || this.accessToken), '', ''];
         return Buffer.from(authData.join('\x01'), 'utf-8').toString('base64');
     }
-
     /**
      * Custom POST request handler.
-     * This is only needed to keep paths short in Windows – usually this module
+     * This is only needed to keep paths short in Windows, usually this module
      * is a dependency of a dependency and if it tries to require something
      * like the request module the paths get way too long to handle for Windows.
      * As we do only a simple POST request we do not actually require complicated
      * logic support (no redirects, no nothing) anyway.
      *
-     * @param {String} url Url to POST to
-     * @param {String|Buffer} payload Payload to POST
-     * @param {Function} callback Callback function with (err, buff)
+     * @param url Url to POST to
+     * @param payload Payload to POST
+     * @param params Client options, the customHeaders and tls values are used for the request
+     * @param callback Callback function with (err, buff)
      */
     postRequest(url, payload, params, callback) {
         let returned = false;
-
         const chunks = [];
         let chunklen = 0;
-
         const fetchOptions = {
             method: 'post',
             headers: params.customHeaders,
             body: payload,
-            allowErrorResponse: true
+            allowErrorResponse: true,
+            // unset falls back to the fetch default, a stalled token endpoint would otherwise keep
+            // `renewing` set and queue every later request
+            timeout: params.requestTimeout
         };
-
-        // OAuth2 token endpoints are credential-bearing. lib/fetch already
+        // OAuth2 token endpoints are credential-bearing. src/fetch already
         // validates certs by default; pin rejectUnauthorized:true here so the
         // token fetch stays strict, while still layering params.tls (the
         // user's options.tls) on top so callers with a self-hosted provider on
@@ -386,9 +329,7 @@ class XOAuth2 extends Stream {
         if (/^https:/i.test(url)) {
             fetchOptions.tls = Object.assign({ rejectUnauthorized: true }, params.tls || {});
         }
-
         const req = nmfetch(url, fetchOptions);
-
         req.on('readable', () => {
             let chunk;
             while ((chunk = req.read()) !== null) {
@@ -396,7 +337,6 @@ class XOAuth2 extends Stream {
                 chunklen += chunk.length;
             }
         });
-
         req.once('error', err => {
             if (returned) {
                 return;
@@ -404,7 +344,6 @@ class XOAuth2 extends Stream {
             returned = true;
             return callback(err);
         });
-
         req.once('end', () => {
             if (returned) {
                 return;
@@ -413,36 +352,35 @@ class XOAuth2 extends Stream {
             return callback(null, Buffer.concat(chunks, chunklen));
         });
     }
-
     /**
      * Encodes a buffer or a string into Base64url format
      *
-     * @param {Buffer|String} data The data to convert
-     * @return {String} The encoded string
+     * @param data The data to convert
+     * @return The encoded string
      */
     toBase64URL(data) {
         if (typeof data === 'string') {
             data = Buffer.from(data);
         }
-
         return data
             .toString('base64')
             .replace(/[=]+/g, '') // remove '='s
             .replace(/\+/g, '-') // '+' → '-'
             .replace(/\//g, '_'); // '/' → '_'
     }
-
     /**
      * Creates a JSON Web Token signed with RS256 (SHA256 + RSA)
      *
-     * @param {Object} payload The payload to include in the generated token
-     * @return {String} The generated and signed token
+     * @param payload The payload to include in the generated token
+     * @return The generated and signed token
      */
     jwtSignRS256(payload) {
-        payload = ['{"alg":"RS256","typ":"JWT"}', JSON.stringify(payload)].map(val => this.toBase64URL(val)).join('.');
-        const signature = crypto.createSign('RSA-SHA256').update(payload).sign(this.options.privateKey);
-        return payload + '.' + this.toBase64URL(signature);
+        const signedPayload = ['{"alg":"RS256","typ":"JWT"}', JSON.stringify(payload)].map(val => this.toBase64URL(val)).join('.');
+        const signature = crypto
+            .createSign('RSA-SHA256')
+            .update(signedPayload)
+            .sign(this.options.privateKey);
+        return signedPayload + '.' + this.toBase64URL(signature);
     }
 }
-
-module.exports = XOAuth2;
+export default XOAuth2;

package/dist/node_modules/nodemailer/{lib → dist}/well-known/services.json

@@ -107,7 +107,7 @@
 
     "FastMail": {
         "description": "FastMail",
-        "domains": ["fastmail.fm"],
+        "domains": ["fastmail.com", "fastmail.fm"],
         "host": "smtp.fastmail.com",
         "port": 465,
         "secure": true
@@ -196,7 +196,7 @@
     "iCloud": {
         "description": "iCloud Mail",
         "aliases": ["Me", "Mac"],
-        "domains": ["me.com", "mac.com"],
+        "domains": ["icloud.com", "me.com", "mac.com"],
         "host": "smtp.mail.me.com",
         "port": 587
     },
@@ -279,6 +279,13 @@
         "port": 25
     },
 
+    "MailSenpai": {
+        "description": "MailSenpai (SMTP Senpai, EU)",
+        "host": "relay.mailsenpai.com",
+        "port": 2525,
+        "secure": false
+    },
+
     "Mailtrap": {
         "description": "Mailtrap",
         "host": "live.smtp.mailtrap.io",

package/dist/node_modules/nodemailer/package.json

@@ -1 +1 @@
-{"name":"nodemailer","version":"9.1.1","description":"Easy as cake e-mail sending from your Node.js applications","main":"lib/nodemailer.js","scripts":{"test":"node --test --test-concurrency=1 $(find test \\( -name '*-test.js' -o -name '*.test.js' \\))","test:coverage":"c8 node --test --test-concurrency=1 $(find test \\( -name '*-test.js' -o -name '*.test.js' \\))","format":"prettier --write \"**/*.{js,json,md}\"","format:check":"prettier --check \"**/*.{js,json,md}\"","lint":"eslint .","lint:fix":"eslint . --fix","update":"rm -rf node_modules/ package-lock.json && ncu -u && npm install","test:syntax":"docker run --rm -v \"$PWD:/app:ro\" -w /app node:6-alpine node test/syntax-compat.js"},"repository":{"type":"git","url":"https://github.com/nodemailer/nodemailer.git"},"keywords":["Nodemailer"],"author":"Andris Reinman","license":"MIT-0","bugs":{"url":"https://github.com/nodemailer/nodemailer/issues"},"homepage":"https://nodemailer.com/","devDependencies":{"@aws-sdk/client-sesv2":"3.1121.0","bunyan":"1.8.15","c8":"12.0.0","eslint":"10.9.1","eslint-config-prettier":"10.1.8","globals":"17.11.0","libbase64":"1.3.0","libmime":"5.4.2","libqp":"2.1.1","prettier":"3.9.6","proxy":"1.0.2","proxy-test-server":"1.0.0","smtp-server":"3.19.4"},"engines":{"node":">=6.0.0"},"_lastModified":"2026-09-30T14:03:59.223Z"}
+{"name":"nodemailer","version":"10.0.14","description":"Easy as cake e-mail sending from your Node.js applications","type":"module","main":"./dist/cjs/nodemailer.js","typesVersions":{"*":{"lib/well-known/services.json":["dist/well-known/services.json"],"lib/well-known/services":["dist/well-known/services.json"],"lib/*":["dist/cjs/*/index.d.ts","dist/cjs/*.d.ts"]}},"exports":{".":{"import":"./dist/esm/nodemailer.js","require":"./dist/cjs/nodemailer.js"},"./lib/addressparser":{"import":"./dist/esm/addressparser/index.js","require":"./dist/cjs/addressparser/index.js"},"./lib/base64":{"import":"./dist/esm/base64/index.js","require":"./dist/cjs/base64/index.js"},"./lib/dkim":{"import":"./dist/esm/dkim/index.js","require":"./dist/cjs/dkim/index.js"},"./lib/fetch":{"import":"./dist/esm/fetch/index.js","require":"./dist/cjs/fetch/index.js"},"./lib/json-transport":{"import":"./dist/esm/json-transport/index.js","require":"./dist/cjs/json-transport/index.js"},"./lib/mail-composer":{"import":"./dist/esm/mail-composer/index.js","require":"./dist/cjs/mail-composer/index.js"},"./lib/mailer":{"import":"./dist/esm/mailer/index.js","require":"./dist/cjs/mailer/index.js"},"./lib/mime-funcs":{"import":"./dist/esm/mime-funcs/index.js","require":"./dist/cjs/mime-funcs/index.js"},"./lib/mime-node":{"import":"./dist/esm/mime-node/index.js","require":"./dist/cjs/mime-node/index.js"},"./lib/punycode":{"import":"./dist/esm/punycode/index.js","require":"./dist/cjs/punycode/index.js"},"./lib/qp":{"import":"./dist/esm/qp/index.js","require":"./dist/cjs/qp/index.js"},"./lib/sendmail-transport":{"import":"./dist/esm/sendmail-transport/index.js","require":"./dist/cjs/sendmail-transport/index.js"},"./lib/ses-transport":{"import":"./dist/esm/ses-transport/index.js","require":"./dist/cjs/ses-transport/index.js"},"./lib/shared":{"import":"./dist/esm/shared/index.js","require":"./dist/cjs/shared/index.js"},"./lib/smtp-connection":{"import":"./dist/esm/smtp-connection/index.js","require":"./dist/cjs/smtp-connection/index.js"},"./lib/smtp-pool":{"import":"./dist/esm/smtp-pool/index.js","require":"./dist/cjs/smtp-pool/index.js"},"./lib/smtp-transport":{"import":"./dist/esm/smtp-transport/index.js","require":"./dist/cjs/smtp-transport/index.js"},"./lib/stream-transport":{"import":"./dist/esm/stream-transport/index.js","require":"./dist/cjs/stream-transport/index.js"},"./lib/well-known":{"import":"./dist/esm/well-known/index.js","require":"./dist/cjs/well-known/index.js"},"./lib/well-known/services.json":"./dist/well-known/services.json","./lib/well-known/services":"./dist/well-known/services.json","./lib/xoauth2":{"import":"./dist/esm/xoauth2/index.js","require":"./dist/cjs/xoauth2/index.js"},"./lib/*.js":{"import":"./dist/esm/*.js","require":"./dist/cjs/*.js"},"./lib/*":{"import":"./dist/esm/*.js","require":"./dist/cjs/*.js"},"./package.json":"./package.json"},"files":["dist","CHANGELOG.md","SECURITY.md","SECURITY.txt"],"scripts":{"build":"node scripts/build.js","typecheck":"node scripts/build.js --generate-only && tsc -p tsconfig.json","pretest":"npm run build","test":"node --import tsx --test --test-concurrency=1 $(find test \\( -name '*-test.ts' -o -name '*.test.ts' \\))","pretest:coverage":"npm run build","test:coverage":"c8 node --import tsx --test --test-concurrency=1 $(find test \\( -name '*-test.ts' -o -name '*.test.ts' \\))","pretest:bun":"npm run build","test:bun":"bun test --timeout 60000 $(find ./test \\( -name '*-test.ts' -o -name '*.test.ts' \\))","format":"prettier --write \"**/*.{js,cjs,ts,json,md}\"","format:check":"prettier --check \"**/*.{js,cjs,ts,json,md}\"","lint":"eslint . && npm run typecheck","lint:fix":"eslint . --fix","prepare":"npm run build","update":"rm -rf node_modules/ package-lock.json && ncu -u && npm install"},"repository":{"type":"git","url":"https://github.com/nodemailer/nodemailer.git"},"keywords":["Nodemailer"],"author":"Andris Reinman","license":"MIT-0","bugs":{"url":"https://github.com/nodemailer/nodemailer/issues"},"homepage":"https://nodemailer.com/","devDependencies":{"@aws-sdk/client-sesv2":"3.1146.0","@types/node":"20.19.43","bunyan":"1.8.15","c8":"12.0.0","eslint":"10.12.0","eslint-config-prettier":"10.1.8","globals":"17.13.0","libbase64":"1.3.1","libmime":"5.4.6","libqp":"2.1.2","mailauth":"7.1.0","prettier":"3.9.9","proxy":"1.0.2","proxy-test-server":"1.0.0","smtp-server":"3.19.16","tsx":"4.23.15","typescript":"6.0.3","typescript-eslint":"8.71.0"},"engines":{"node":">=20.0.0"},"_lastModified":"2026-10-06T06:19:59.205Z"}

package/package.json

@@ -6,7 +6,7 @@
   "description": "Send email in workflow.",
   "description.ru-RU": "Отправляет электронное письмо в рамках рабочего процесса.",
   "description.zh-CN": "可用于在工作流中发送电子邮件。",
-  "version": "2.2.20",
+  "version": "2.2.21",
   "license": "Apache-2.0",
   "main": "./dist/server/index.js",
   "homepage": "https://docs.nocobase.com/handbook/workflow-smtp-mailer",
@@ -15,7 +15,7 @@
   "devDependencies": {
     "antd": "5.x",
     "joi": "^17.13.6",
-    "nodemailer": "^9.1.1",
+    "nodemailer": "~10.0.9",
     "react": "18.x"
   },
   "peerDependencies": {
@@ -27,7 +27,7 @@
     "@nocobase/server": "2.x",
     "@nocobase/test": "2.x"
   },
-  "gitHead": "d9c3d45cdca9571f6cef8781e0a2d86566dce11b",
+  "gitHead": "b3ab91d3475d2763c922e0cad9486bf7cb20ac70",
   "keywords": [
     "NocoBase",
     "Workflow",

package/dist/node_modules/nodemailer/.gitattributes

@@ -1,6 +0,0 @@
-*.js text eol=lf
-*.txt text eol=lf
-*.html text eol=lf
-*.htm text eol=lf
-*.ics -text
-*.bin -text

package/dist/node_modules/nodemailer/.ncurc.js

@@ -1,9 +0,0 @@
-'use strict';
-
-module.exports = {
-    upgrade: true,
-    reject: [
-        // API changes break existing tests
-        'proxy'
-    ]
-};

package/dist/node_modules/nodemailer/.prettierignore

@@ -1,8 +0,0 @@
-node_modules
-coverage
-*.min.js
-dist
-build
-.nyc_output
-package-lock.json
-CHANGELOG.md