Skip to content

chore: upgrade nodemailer to ^9.0.1 to address GHSA-p6gq-j5cr-w38f #1356

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
brendan-kellam merged 5 commits into from
Jul 2, 2026
Merged

chore: upgrade nodemailer to ^9.0.1 to address GHSA-p6gq-j5cr-w38f #1356

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
7907a9a
chore: upgrade nodemailer to ^9.0.1 to address GHSA-p6gq-j5cr-w38f
linear-code[bot] Jun 21, 2026
a4d4ee6
docs: add CHANGELOG entry for nodemailer upgrade
linear-code[bot] Jun 21, 2026
9863a6a
Merge branch 'main' into linear/sou-1410-sourcebot-devsourcebot-ghsa-…
brendan-kellam Jun 23, 2026
0df09b7
Merge branch 'main' into linear/sou-1410-sourcebot-devsourcebot-ghsa-…
brendan-kellam Jul 2, 2026
6f24e61
Update CHANGELOG.md with recent changes
brendan-kellam Jul 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- Passed Zoekt index parameters via argv to preserve revision names with punctuation. [#1376](https://github.com/sourcebot-dev/sourcebot/pull/1376)
- [EE] Validated OAuth bearer token scopes before allowing access to the Sourcebot MCP resource server. [#1396](https://github.com/sourcebot-dev/sourcebot/pull/1396)
- Added HTTP security headers to all web app responses. [#1407](https://github.com/sourcebot-dev/sourcebot/pull/1407)
- Upgraded `nodemailer` to `^9.0.1`. [#1356](https://github.com/sourcebot-dev/sourcebot/pull/1356)

## [5.0.4] - 2026-06-18

Expand Down
2 changes: 1 addition & 1 deletion packages/web/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -167,7 +167,7 @@
"next-auth": "^5.0.0-beta.30",
"next-navigation-guard": "^0.2.0",
"next-themes": "^0.3.0",
"nodemailer": "^8.0.9",
"nodemailer": "^9.0.1",
"octokit": "^4.1.3",
"openai": "^4.98.0",
"parse-diff": "^0.11.1",
Expand Down
10 changes: 5 additions & 5 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9497,7 +9497,7 @@ __metadata:
next-auth: "npm:^5.0.0-beta.30"
next-navigation-guard: "npm:^0.2.0"
next-themes: "npm:^0.3.0"
nodemailer: "npm:^8.0.9"
nodemailer: "npm:^9.0.1"
npm-run-all: "npm:^4.1.5"
octokit: "npm:^4.1.3"
openai: "npm:^4.98.0"
Expand Down Expand Up @@ -18968,10 +18968,10 @@ __metadata:
languageName: node
linkType: hard

"nodemailer@npm:^8.0.9":
version: 8.0.11
resolution: "nodemailer@npm:8.0.11"
checksum: 10c0/19229216c63a32eae59d7b39f3dffeba20be317f2335d08d86fb70bd01845a1bf108fecd019c0e90ef186e3d9177cf478192b333cf38620ad0f8c7a6e1e5ae05
"nodemailer@npm:^9.0.1":
version: 9.0.1
resolution: "nodemailer@npm:9.0.1"
checksum: 10c0/4213f01aa211127c1ce33243c5e45e7f831601a933d03fa864cd827b1bd5ea2782cb4b43722bee7028cbc193733d9802dad1120fe67181448eb0b7de52218a37
languageName: node
linkType: hard

Expand Down
Loading