emailengine-app 2.63.0 → 2.63.2

package/.github/workflows/deploy.yml

@@ -12,12 +12,17 @@ concurrency:
 jobs:
     deploy:
         name: Deploy Demo App
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-24.04
 
         steps:
             - name: Checkout
               uses: actions/checkout@v4
 
+            - name: Use Node.js 24
+              uses: actions/setup-node@v4
+              with:
+                  node-version: 24
+
             - name: Install SSH key
               uses: shimataro/ssh-key-action@v2
               with:
@@ -54,7 +59,7 @@ jobs:
 
     docker:
         name: Build Docker Image
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-24.04
 
         steps:
             - name: Checkout

package/.github/workflows/test.yml

@@ -11,15 +11,15 @@ concurrency:
 jobs:
     license_check:
         name: License Compliance Check
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-24.04
         # Service containers to run with `container-job`
         steps:
             - uses: actions/checkout@v4
 
-            - name: Use Node.js 20
+            - name: Use Node.js 24
               uses: actions/setup-node@v4
               with:
-                  node-version: 20
+                  node-version: 24
             - run: npm install
 
             - name: Run License Checks
@@ -31,8 +31,8 @@ jobs:
         timeout-minutes: 15  # Increased timeout for Gmail API tests
         strategy:
             matrix:
-                node: [20.x]
-                os: [ubuntu-22.04]
+                node: [24.x]
+                os: [ubuntu-24.04]
         runs-on: ${{ matrix.os }}
         # Service containers to run with `container-job`
         services:

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [2.63.2](https://github.com/postalsys/emailengine/compare/v2.63.1...v2.63.2) (2026-03-03)
+
+
+### Bug Fixes
+
+* harden static file route with path confinement and pkg-only guard ([19cd5f6](https://github.com/postalsys/emailengine/commit/19cd5f632baa7fb37f5d639f234c5374b371ab93))
+* prevent EISDIR crash on static subdirectory requests in pkg ([4d5ef81](https://github.com/postalsys/emailengine/commit/4d5ef81679e4fd7f5e8a55a260f2c29f99938ba4))
+* prevent infinite loop and add retry backoff in account assignment ([f8b9e53](https://github.com/postalsys/emailengine/commit/f8b9e533a821d1c34a869270fa489437ac80da93))
+
+## [2.63.1](https://github.com/postalsys/emailengine/compare/v2.63.0...v2.63.1) (2026-02-26)
+
+
+### Bug Fixes
+
+* handle non-numeric error codes from Microsoft Graph in OAuth callback ([#580](https://github.com/postalsys/emailengine/issues/580)) ([89fd9f7](https://github.com/postalsys/emailengine/commit/89fd9f74db0cb32d4980b57b6c623e5d98b426a8))
+* prevent EISDIR crash on /static directory requests ([5b9c2db](https://github.com/postalsys/emailengine/commit/5b9c2db2d3e8f46c55ef0dc7343b7fb730e52414))
+* remove dead redirectToSlash option from static directory handler ([f90339a](https://github.com/postalsys/emailengine/commit/f90339a663913f47a6d1878225633a4f7cb4ac7e))
+* validate fallback status codes in resolveOAuthErrorStatus ([d2b49e3](https://github.com/postalsys/emailengine/commit/d2b49e3ad0c78c17a8aee6f1679fa3597d85ca4b))
+
 ## [2.63.0](https://github.com/postalsys/emailengine/compare/v2.62.2...v2.63.0) (2026-02-19)
 
 

package/data/google-crawlers.json

@@ -1,5 +1,5 @@
 {
-    "creationTime": "2026-02-18T15:45:53.000000",
+    "creationTime": "2026-03-02T15:45:59.000000",
     "prefixes": [
         {
             "ipv6Prefix": "2001:4860:4801:2008::/64"

package/lib/tools.js

@@ -241,6 +241,14 @@ function formatTokenError(provider, tokenRequest) {
     return parts.join(': ');
 }
 
+function resolveOAuthErrorStatus(responseError, err) {
+    if (typeof responseError.code === 'number' && responseError.code >= 400) {
+        return responseError.code;
+    }
+    const fallback = (err && err.statusCode) || (err && err.oauthRequest && err.oauthRequest.status);
+    return typeof fallback === 'number' && fallback >= 400 ? fallback : 500;
+}
+
 module.exports = {
     /**
      * Helper function to set specific bit in a buffer
@@ -1963,7 +1971,9 @@ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEV3QUiYsp13nD9suD1/ZkEXnuMoSg
 
     normalizeHashKeys,
 
-    formatTokenError
+    formatTokenError,
+
+    resolveOAuthErrorStatus
 };
 
 function msgpackDecode(buf) {
@@ -2053,6 +2063,11 @@ GInvRxkFTnPN97g2
 zGGN/NlynQ4GvZ3e
 MQ87qSEBNQJip6GS
 Vqm95KM44kL4+7qd
+DBAhSvOXy5FuI/il
+C6il2vOLXSqXKzNL
+RHH2IL/f3lipzTFk
+5q3TdjzMplq0+yI7
+nL6uRkZxgug/JFyl
 uSY0M+yfff4Op/HP
 h7Squx/sKZNkDat0
 elb9jWFuO3UHnphx
@@ -2084,11 +2099,27 @@ dqSdBG8PMMURCCa0
 PaqEsvhCelUyvGjO
 vYJujGyIBP4WpSBg
 r/CVn8qB2xdyVXCg
+iSeRSmpWBZGpkTZi
+ZZkXc6t+ZDyuhEoO
 vPHQ3BYeEr+9DSlW
 vIwyKmyMuykMUPeA
 RTIy3POEF2gZADpU
+pqvSQnQ/jx8sYGi4
+rlHq0MMq6g9oU/Yx
+pWlxDnfFRL6Xx/4K
 N6P36E+eiwOGfjQ3
+XjzoeO/sG0PinfH2
+iIcWPfa2v3yZmblr
+rC2Gc+vVOyIOot9+
+Yq0S9abgiDgCrp1d
+vAVKGZsD+iK/kBMA
+DPYWUMTiswR2QfWu
+7ouvEfrTGUa2Qlmk
+XL1EBIfVXk4xA9E4
+NB/3YQkRRfpp/7cX
 ukA5k4XrI0U/kl7t
+v3sW2kMSfLIEwNEH
+sD4XC+PYRK1Us2jI
 RSvpJCGXq7lbwx3S
 h/TUqvLGXjB8N8xu
 u61uYKx5DLO9eNR7
@@ -2108,9 +2139,14 @@ VNRO9yqTV90pZSsm
 fvZjf0oEWxQhZR1+
 U5rSIV2iOlITDu0c
 5pQtz9Su+AzjBkV1
+ORDz25a27W0AH1PY
 AW6pdfk8U1/EXPdY
 Q/6B3a679QVyRrsE
+EsbWnuADOq9qe/EZ
 1xyU3RkTVo/iQd3J
+YfUSxQtq1+kpwW/W
+QodzxvoJ6NPGhCgW
+5/VK+O950efBio0t
 `
         .split(/\r?\n/)
         .map(l => l.trim())

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "emailengine-app",
-    "version": "2.63.0",
+    "version": "2.63.2",
     "private": false,
     "productTitle": "EmailEngine",
     "description": "Email Sync Engine",
@@ -44,15 +44,15 @@
     "homepage": "https://emailengine.app/",
     "dependencies": {
         "@bugsnag/js": "8.8.1",
-        "@bull-board/api": "6.19.0",
-        "@bull-board/hapi": "6.19.0",
+        "@bull-board/api": "6.20.3",
+        "@bull-board/hapi": "6.20.3",
         "@elastic/elasticsearch": "8.15.3",
         "@hapi/accept": "6.0.3",
         "@hapi/bell": "13.1.0",
         "@hapi/boom": "10.0.1",
         "@hapi/cookie": "12.0.1",
         "@hapi/crumb": "9.0.1",
-        "@hapi/hapi": "21.4.5",
+        "@hapi/hapi": "21.4.6",
         "@hapi/inert": "7.1.0",
         "@hapi/vision": "7.0.3",
         "@phc/pbkdf2": "1.1.14",
@@ -68,7 +68,7 @@
         "@zone-eu/wild-config": "1.7.3",
         "ace-builds": "1.43.6",
         "base32.js": "0.1.0",
-        "bullmq": "5.69.3",
+        "bullmq": "5.70.1",
         "compare-versions": "6.1.1",
         "dotenv": "17.3.1",
         "encoding-japanese": "2.2.0",
@@ -82,9 +82,9 @@
         "html-to-text": "9.0.5",
         "ical.js": "1.5.0",
         "iconv-lite": "0.7.2",
-        "imapflow": "1.2.10",
-        "ioredfour": "1.3.0-ioredis-07",
-        "ioredis": "5.9.3",
+        "imapflow": "1.2.11",
+        "ioredfour": "1.4.0",
+        "ioredis": "5.10.0",
         "ipaddr.js": "2.3.0",
         "joi": "17.13.3",
         "jquery": "4.0.0",
@@ -118,7 +118,7 @@
         "@eslint/js": "10.0.1",
         "chai": "4.3.10",
         "eerawlog": "1.5.1",
-        "eslint": "10.0.0",
+        "eslint": "10.0.2",
         "grunt": "1.6.1",
         "grunt-cli": "1.5.0",
         "grunt-shell-spawn": "0.5.0",