@postalsys/email-text-tools 2.4.10 → 2.4.12

package/.ncurc.js

@@ -5,6 +5,10 @@ module.exports = {
         'nanoid',
         'jsdom', // parse5 dependency in 27.0.1 is ESM only
         'juice', // 12+ is pure ESM (requires Node >=22.12) and breaks pkg builds
-        'node-html-parser' // 8+ depends on entities@8, which is pure ESM (no require export) and breaks CJS/pkg builds on Node <20.19; stay on 7.x (uses he)
+        'node-html-parser', // 8+ depends on entities@8, which is pure ESM (no require export) and breaks CJS/pkg builds on Node <20.19; stay on 7.x (uses he)
+        // 6.0.0 changed the CommonJS export shape (named bindings instead of the constructor) and,
+        // more importantly, stopped linkifying bare domains such as 'example.com' or 'www.example.org'
+        // by default, which silently breaks autolinking in plain text emails. Stay on 5.x.
+        'linkify-it'
     ]
 };

package/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-    ".": "2.4.10"
+    ".": "2.4.12"
 }

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [2.4.12](https://github.com/postalsys/email-text-tools/compare/v2.4.11...v2.4.12) (2026-08-11)
+
+
+### Bug Fixes
+
+* **deps:** update dompurify to 3.4.13 to address GHSA-55q2-fjhq-7xh7 ([416bad2](https://github.com/postalsys/email-text-tools/commit/416bad2b79ea7b8d45abd66612da862cbbb5b4e3))
+
+## [2.4.11](https://github.com/postalsys/email-text-tools/compare/v2.4.10...v2.4.11) (2026-07-20)
+
+
+### Bug Fixes
+
+* **deps:** update dompurify and moment-timezone ([372ab61](https://github.com/postalsys/email-text-tools/commit/372ab6172b60b2096041111bdc47dad0b33da50f))
+
 ## [2.4.10](https://github.com/postalsys/email-text-tools/compare/v2.4.9...v2.4.10) (2026-07-05)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@postalsys/email-text-tools",
-    "version": "2.4.10",
+    "version": "2.4.12",
     "description": "Email text tools",
     "main": "index.js",
     "scripts": {
@@ -26,18 +26,18 @@
     "homepage": "https://github.com/postalsys/email-text-tools#readme",
     "devDependencies": {
         "@eslint/js": "10.0.1",
-        "eslint": "10.6.0",
+        "eslint": "10.8.1",
         "eslint-config-prettier": "10.1.8",
-        "prettier": "3.9.4"
+        "prettier": "3.9.6"
     },
     "dependencies": {
-        "dompurify": "3.4.11",
+        "dompurify": "3.4.13",
         "he": "1.2.0",
         "html-to-text": "10.0.0",
         "jsdom": "27.0.0",
         "juice": "11.1.1",
         "linkify-it": "5.0.2",
-        "moment-timezone": "0.6.2",
+        "moment-timezone": "0.6.3",
         "node-html-parser": "7.1.0",
         "tlds": "1.261.0"
     }

package/test/comprehensive.test.js

@@ -37,6 +37,15 @@ describe('Comprehensive Test Suite', () => {
             assert.ok(html.includes('https://example.com'));
         });
 
+        it('should linkify bare domains without a scheme', () => {
+            // linkify-it 6 stopped doing this by default, which silently dropped
+            // autolinking for plain text emails, so keep it covered
+            const html = textToHtml('Visit example.com and www.example.org today');
+
+            assert.ok(html.includes('<a href="http://example.com">example.com</a>'));
+            assert.ok(html.includes('<a href="http://www.example.org">www.example.org</a>'));
+        });
+
         it('should handle email addresses', () => {
             const text = 'Contact me at test@example.com';
             const html = textToHtml(text);

package/.github/codeql/codeql-config.yml

@@ -1,11 +0,0 @@
-name: "email-text-tools CodeQL config"
-
-# Exclude code that is not part of the published runtime from analysis.
-# These paths generate only false-positive noise:
-#   - tests and fixtures intentionally feed malformed/hostile input
-#   - benchmarks and examples are developer-only helper scripts
-paths-ignore:
-    - test
-    - '**/test/**'
-    - benchmark
-    - examples

package/.github/workflows/codeql.yml

@@ -1,47 +0,0 @@
-name: "CodeQL Advanced"
-
-on:
-    push:
-        branches: ["main"]
-    pull_request:
-        branches: ["main"]
-    schedule:
-        - cron: "40 17 * * 6"
-
-jobs:
-    analyze:
-        name: Analyze (${{ matrix.language }})
-        runs-on: ubuntu-latest
-        permissions:
-            # required for all workflows
-            security-events: write
-            # required to fetch internal or private CodeQL packs
-            packages: read
-            # only required for workflows in private repositories
-            actions: read
-            contents: read
-
-        strategy:
-            fail-fast: false
-            matrix:
-                include:
-                    - language: actions
-                      build-mode: none
-                    - language: javascript-typescript
-                      build-mode: none
-
-        steps:
-            - name: Checkout repository
-              uses: actions/checkout@v6
-
-            - name: Initialize CodeQL
-              uses: github/codeql-action/init@v4
-              with:
-                  languages: ${{ matrix.language }}
-                  build-mode: ${{ matrix.build-mode }}
-                  config-file: ./.github/codeql/codeql-config.yml
-
-            - name: Perform CodeQL Analysis
-              uses: github/codeql-action/analyze@v4
-              with:
-                  category: "/language:${{ matrix.language }}"