From 804c6bb7377c8905662e2695841e8188b2af864e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 21 Jun 2026 06:17:17 +0000
Subject: [PATCH] chore(deps): bump nodemailer from 8.0.5 to 9.0.1

Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 8.0.5 to 9.0.1.
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodemailer/nodemailer/compare/v8.0.5...v9.0.1)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 9.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json                          |  2 +-
 packages/fxa-auth-server/package.json |  2 +-
 yarn.lock                             | 12 ++++++------
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package.json b/package.json
index 932e9beb2a2..19df25593ae 100644
--- a/package.json
+++ b/package.json
@@ -125,7 +125,7 @@
     "node-fetch": "^2.6.7",
     "node-hkdf": "^0.0.2",
     "node-jose": "^2.2.0",
-    "nodemailer": "^8.0.5",
+    "nodemailer": "^9.0.1",
     "nps": "^5.10.0",
     "objection": "^3.1.3",
     "os-browserify": "^0.3.0",
diff --git a/packages/fxa-auth-server/package.json b/packages/fxa-auth-server/package.json
index 018399a1f09..a8e031aa8fa 100644
--- a/packages/fxa-auth-server/package.json
+++ b/packages/fxa-auth-server/package.json
@@ -104,7 +104,7 @@
     "mozlog": "^3.0.2",
     "mysql": "^2.18.1",
     "node-zendesk": "^2.2.0",
-    "nodemailer": "^8.0.5",
+    "nodemailer": "^9.0.1",
     "openapi-fetch": "^0.13.5",
     "otplib": "^11.0.1",
     "p-queue": "^8.1.0",
diff --git a/yarn.lock b/yarn.lock
index f2a85729d43..9c23fc25fdf 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -31061,7 +31061,7 @@ __metadata:
     mysql: "npm:^2.18.1"
     nock: "npm:^13.5.1"
     node-zendesk: "npm:^2.2.0"
-    nodemailer: "npm:^8.0.5"
+    nodemailer: "npm:^9.0.1"
     nodemon: "npm:^3.1.0"
     nx: "npm:21.2.4"
     openapi-fetch: "npm:^0.13.5"
@@ -31827,7 +31827,7 @@ __metadata:
     node-fetch: "npm:^2.6.7"
     node-hkdf: "npm:^0.0.2"
     node-jose: "npm:^2.2.0"
-    nodemailer: "npm:^8.0.5"
+    nodemailer: "npm:^9.0.1"
     nps: "npm:^5.10.0"
     nx: "npm:21.2.4"
     nx-cloud: "npm:19.1.0"
@@ -41249,10 +41249,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"nodemailer@npm:^8.0.5":
-  version: 8.0.5
-  resolution: "nodemailer@npm:8.0.5"
-  checksum: 10c0/5e8450499bd059c56d74ba96fa5f9928de2ecdae0d53c083dba5661d797114c1f9524d30f992d0263cc5a7dcf5a54b9c1d92dc1f766da150c9d0bde7d3798431
+"nodemailer@npm:^9.0.1":
+  version: 9.0.1
+  resolution: "nodemailer@npm:9.0.1"
+  checksum: 10c0/4213f01aa211127c1ce33243c5e45e7f831601a933d03fa864cd827b1bd5ea2782cb4b43722bee7028cbc193733d9802dad1120fe67181448eb0b7de52218a37
   languageName: node
   linkType: hard