libbase64 1.3.0 → 1.3.1

package/.github/workflows/release.yaml

@@ -2,6 +2,9 @@ on:
     push:
         branches:
             - master
+    # Manual run: publish the version currently on master (used when a release was cut
+    # but the publish step failed)
+    workflow_dispatch:
 
 permissions:
     contents: write
@@ -15,23 +18,22 @@ jobs:
         steps:
             - uses: google-github-actions/release-please-action@v3
               id: release
+              if: ${{ github.event_name == 'push' }}
               with:
                   release-type: node
                   package-name: ${{vars.NPM_MODULE_NAME}}
                   pull-request-title-pattern: 'chore${scope}: release ${version} [skip-ci]'
-            # The logic below handles the npm publication:
+            # The logic below handles the npm publication through npm trusted publishing
+            # (OIDC, no token secret): it runs when a new release is created, or on a
+            # manual dispatch.
             - uses: actions/checkout@v4
-              # these if statements ensure that a publication only occurs when
-              # a new release is created:
-              if: ${{ steps.release.outputs.release_created }}
+              if: ${{ steps.release.outputs.release_created || github.event_name == 'workflow_dispatch' }}
             - uses: actions/setup-node@v4
               with:
-                  node-version: 20
+                  node-version: 24
                   registry-url: 'https://registry.npmjs.org'
-              if: ${{ steps.release.outputs.release_created }}
+              if: ${{ steps.release.outputs.release_created || github.event_name == 'workflow_dispatch' }}
             - run: npm ci
-              if: ${{ steps.release.outputs.release_created }}
+              if: ${{ steps.release.outputs.release_created || github.event_name == 'workflow_dispatch' }}
             - run: npm publish --provenance --access public
-              env:
-                  NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
-              if: ${{ steps.release.outputs.release_created }}
+              if: ${{ steps.release.outputs.release_created || github.event_name == 'workflow_dispatch' }}

package/.ncurc.js

@@ -1,7 +1,13 @@
 module.exports = {
     upgrade: true,
     reject: [
+        // 12 is esm only ("type": "module"), and grunt-mocha-test require()s it as a
+        // constructor - "Mocha is not a constructor". Node 24 hides this through
+        // require(esm); CI on Node 22 does not. Lift it when the runner drops grunt.
+        'mocha',
         // 5x is esm only
-        'chai'
+        'chai',
+        // api changes in newer eslint
+        'grunt-eslint'
     ]
 };

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.3.1](https://github.com/nodemailer/libbase64/compare/v1.3.0...v1.3.1) (2026-09-28)
+
+
+### Bug Fixes
+
+* **decoder:** decode every padded segment instead of stopping at the first padding ([d9ba154](https://github.com/nodemailer/libbase64/commit/d9ba154ba13e45338936a55acec417dfb6ae2e52))
+
 ## [1.3.0](https://github.com/nodemailer/libbase64/compare/v1.2.1...v1.3.0) (2024-02-23)
 
 

package/lib/libbase64.js

@@ -26,6 +26,22 @@ function encode(buffer) {
  */
 function decode(str) {
     str = str || '';
+
+    // Buffer.from() stops decoding at the first padding char, so input made of several
+    // padded segments (eg. every line padded on its own) is decoded segment by segment
+    if (typeof str === 'string') {
+        let padPos = str.indexOf('=');
+        if (padPos >= 0 && /[a-zA-Z0-9+/\-_]/.test(str.substr(padPos))) {
+            let parts = [];
+            for (let segment of str.split(/[=]+/)) {
+                if (segment) {
+                    parts.push(Buffer.from(segment, 'base64'));
+                }
+            }
+            return Buffer.concat(parts);
+        }
+    }
+
     return Buffer.from(str, 'base64');
 }
 
@@ -215,6 +231,15 @@ class Decoder extends Transform {
             b64 = b64.replace(/[^a-zA-Z0-9+/=]/g, '');
         }
 
+        // everything up to the last padding char ends in complete segments, quartets are
+        // only counted from there on as a padding run restarts the quartet alignment
+        let padded = '';
+        let lastPad = b64.lastIndexOf('=');
+        if (lastPad >= 0) {
+            padded = b64.substr(0, lastPad + 1);
+            b64 = b64.substr(lastPad + 1);
+        }
+
         if (b64.length < 4) {
             this._curLine = b64;
             b64 = '';
@@ -223,6 +248,8 @@ class Decoder extends Transform {
             b64 = b64.substr(0, b64.length - this._curLine.length);
         }
 
+        b64 = padded + b64;
+
         if (b64) {
             let buf = decode(b64);
             this.outputBytes += buf.length;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "libbase64",
-    "version": "1.3.0",
+    "version": "1.3.1",
     "description": "Encode and decode base64 encoded strings",
     "main": "lib/libbase64.js",
     "scripts": {
@@ -24,9 +24,9 @@
     "devDependencies": {
         "chai": "4.4.1",
         "eslint-config-nodemailer": "1.2.0",
-        "eslint-config-prettier": "9.1.0",
-        "grunt": "1.6.1",
-        "grunt-cli": "1.4.3",
+        "eslint-config-prettier": "10.1.8",
+        "grunt": "1.6.3",
+        "grunt-cli": "1.5.0",
         "grunt-eslint": "24.3.0",
         "grunt-mocha-test": "0.13.3",
         "mocha": "10.3.0"