Skip to content

Bump the npm-minor-patch-version-updates group with 4 updates - #1001

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-version-updates-b2e1c8cb69
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-patch-version-updates-b2e1c8cb69

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch-version-updates group with 4 updates: csv-parse, mailparser, smtp-server and snyk.

Updates csv-parse from 7.0.2 to 7.0.3

Changelog

Sourced from csv-parse's changelog.

7.0.3 (2026-09-25)

Bug Fixes

  • csv-parse: preserve typed column keys (#500) (745f045)
  • csv-parse: type the delimiter_auto score callback arguments (#499) (4aa04da)
Commits
  • 594c646 chore(release): publish
  • 16d9900 refactor(csv-parse): isolate error and normalize_options in types
  • 4aa04da fix(csv-parse): type the delimiter_auto score callback arguments (#499)
  • 8d4173d build: latest dev dependencies
  • c8caa1c build: generate latest dist
  • 6c45c9b build: remove npx usage in package scripts
  • 6f39f27 test: remove lint errors
  • 94ae7b9 test: rename mocha setup rule
  • 42a6b09 test: remove ts-node usage
  • 745f045 fix(csv-parse): preserve typed column keys (#500)
  • Additional commits viewable in compare view

Updates mailparser from 3.9.28 to 3.9.47

Changelog

Sourced from mailparser's changelog.

3.9.47 (2026-10-19)

Bug Fixes

3.9.46 (2026-10-18)

Bug Fixes

  • bump libmime to 5.5.1, @​zone-eu/mailsplit to 5.4.26 and nodemailer to 10.1.7 (7279da5)

3.9.45 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.6 (2815d34)

3.9.44 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.5 (218b801)

3.9.43 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.4 (3c68409)

3.9.42 (2026-10-18)

Bug Fixes

  • bump @​zone-eu/mailsplit to 5.4.25 (e4500fb)

3.9.41 (2026-10-18)

Bug Fixes

  • bump @​zone-eu/mailsplit to 5.4.24 (eb4b34b)

3.9.40 (2026-10-16)

... (truncated)

Commits
  • ccf75ba chore(master): release 3.9.47 [skip-ci] (#465)
  • 7df8fed fix: bump libmime to 5.5.2
  • 1eb3eb5 ci: test on the latest Node.js release
  • b5d79cd ci: guard the CommonJS dependency graph
  • 40a6b4c docs: state the Node 20 and CommonJS platform constraints
  • 0870d27 ci: move workflow actions to checkout v7, setup-node v7 and release-please v5
  • 90794b4 docs: update CLAUDE.md for the node:test and flat eslint tooling
  • 586a918 ci: align test workflow
  • 4eb5921 style: reformat with shared prettier config
  • 2a9d860 build: replace grunt and nodeunit with node:test
  • Additional commits viewable in compare view

Updates smtp-server from 3.19.13 to 3.20.2

Changelog

Sourced from smtp-server's changelog.

3.20.2 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.7 (9d5d608)

3.20.1 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.6 (db10401)

3.20.0 (2026-10-18)

Features

  • migrate to TypeScript with ES module and CommonJS builds (aac648c)

Bug Fixes

  • bump nodemailer to 10.1.5 (5c7f785)
  • close the server side of a connection as soon as the client leaves after QUIT (251a538)
  • harden connection lifecycle, TLS timeouts and the DATA stream (be9377a)

3.19.24 (2026-10-18)

Bug Fixes

  • bump nodemailer to 10.1.4 (78965d6)

3.19.23 (2026-10-16)

Bug Fixes

  • bump nodemailer to 10.1.2 (aedb210)
  • close the STARTTLS plaintext injection race, honour client certificate options on implicit TLS and bound what a client may send (ed5c14b)

3.19.22 (2026-10-14)

Bug Fixes

  • deps: update nodemailer to 10.1.1 (73c0fa9)

... (truncated)

Commits
  • 11b37e1 chore(master): release 3.20.2 (#289)
  • 9d5d608 fix: bump nodemailer to 10.1.7
  • 2d0e6df chore(master): release 3.20.1 (#288)
  • db10401 fix: bump nodemailer to 10.1.6
  • 6b5a07f test: make the QUIT socket test send input after the server stopped parsing
  • 530dd55 chore(master): release 3.20.0 (#287)
  • 4ca64df ci: test on Node.js 20, the oldest supported version
  • 251a538 fix: close the server side of a connection as soon as the client leaves after...
  • 5c7f785 fix: bump nodemailer to 10.1.5
  • 426a019 refactor: share TLS socket setup and error handling between STARTTLS and impl...
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates snyk from 1.1307.3 to 1.1308.1

Release notes

Sourced from snyk's releases.

v1.1308.1

1.1308.1 (2026-10-14)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

  • test: snyk test --html and --html-file-output no longer require preview features to be enabled. (3bc664655)

Bug Fixes

v1.1308.0

1.1308.0 (2026-10-08)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

  • code, secrets: snyk code test and snyk secrets test can now generate an HTML report. Use --html to print it to stdout, or --html-file-output=<path> to write it to a file. (0e10434, af6a2a4)
  • agent-scan: The experimental snyk agent-scan command now reports risk indicators instead of issue codes. If you post-process its --json output, update your scripts to the new format. (d5451a6)

Bug Fixes

  • sbom: Maven and Gradle SBOMs, and --print-graph, no longer stall on large multi-module builds. They now finish seconds after the build tool exits. On projects with dependency cycles, the output may contain extra pruned: cyclic placeholder nodes. No packages or dependency edges are dropped. (73f038c)
  • test: Gradle projects with very deep inter-module dependency chains no longer fail with a stack overflow. (fc4f8ec, ce4e5d6)
  • test: .NET scans fall back to legacy scanning when the .NET SDK isn't installed. They also handle projects restored in a different build directory, and work when global NuGet source-mapping rules are configured. (b8461c8)
  • test: .NET scans no longer fail with NU1101 on SDK installs that lack the app host pack, such as distro-packaged SDKs. (1fd1fa4)
  • test: .NET projects whose PackageReference uses a lowercase version attribute are now parsed correctly. (108f8ca)
  • test: Projects built with Gradle 4.0 to 4.6 no longer fail to scan. (1070653)
  • deps: Updates dependencies to fix vulnerabilities:

v1.1307.4

1.1307.4 (2026-09-23)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

  • studio: New experimental snyk studio command that sets up Snyk Studio in your AI coding tools (Cursor, Claude Code, Codex, Copilot, Gemini, Kiro, Windsurf), so the code they generate gets scanned in the background as it's written. Run snyk studio install --experimental to get started. (49653c8)
  • fix: New snyk fix --agentic flags to narrow down what gets fixed: --severity-filter fixes only the listed severities, --breakability-filter fixes only Open Source upgrades with the listed breakability, and --exclude-ids fixes everything except the listed issue IDs. (35298ae)
  • fix: snyk fix --agentic now keeps a failed fix's changes by default so you can review them, and reports the fix as failed. Pass --enable-revert to roll the changes back automatically instead. (35298ae)

... (truncated)

Commits
  • 7970be3 Merge pull request #7369 from snyk/release-candidate
  • 35b02b2 Merge pull request #7361 from snyk/hotfix/v1.1308.1
  • 505bdeb docs: update release notes
  • 8d515f7 fix: update Go runtime to 1.26.9 to address vulnerabilities
  • 2d260f9 chore(ci): Deploy preview to github
  • 0a77e2a docs: update release notes
  • 334f873 fix: CVE-2022-21681 ReDoS
  • 28223ba test: show full cli output on error
  • c7ba3bc chore: increase jest timeout, add cli timeout
  • 4a23a94 chore: optimize sbom reachability spec CLI calls
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch-version-updates group with 4 updates: [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse), [mailparser](https://github.com/nodemailer/mailparser), [smtp-server](https://github.com/nodemailer/smtp-server) and [snyk](https://github.com/snyk/snyk).


Updates `csv-parse` from 7.0.2 to 7.0.3
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@7.0.3/packages/csv-parse)

Updates `mailparser` from 3.9.28 to 3.9.47
- [Release notes](https://github.com/nodemailer/mailparser/releases)
- [Changelog](https://github.com/nodemailer/mailparser/blob/master/CHANGELOG.md)
- [Commits](nodemailer/mailparser@v3.9.28...v3.9.47)

Updates `smtp-server` from 3.19.13 to 3.20.2
- [Release notes](https://github.com/nodemailer/smtp-server/releases)
- [Changelog](https://github.com/nodemailer/smtp-server/blob/master/CHANGELOG.md)
- [Commits](nodemailer/smtp-server@v3.19.13...v3.20.2)

Updates `snyk` from 1.1307.3 to 1.1308.1
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.1307.3...v1.1308.1)

---
updated-dependencies:
- dependency-name: csv-parse
  dependency-version: 7.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch-version-updates
- dependency-name: mailparser
  dependency-version: 3.9.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch-version-updates
- dependency-name: smtp-server
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch-version-updates
- dependency-name: snyk
  dependency-version: 1.1308.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 26, 2026
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants