chore(deps): bump nodemailer and imapflow

[dependabot]

Bumps nodemailer and imapflow. These dependencies needed to be updated together.
Updates nodemailer from 8.0.7 to 10.0.1

Release notes

Sourced from nodemailer's releases.

v10.0.1

10.0.1 (2026-09-07)

Bug Fixes

• types: accept an explicit undefined for optional properties (209719d), closes #1853
• types: drop the internal members from the published declarations (81e64ea)

v10.0.0

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

• Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

• keep the @​types/nodemailer type layout working (1cc5356)
• migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

• apply the other keys of a configuration object next to its url (29610f9)
• dkim: canonicalize raw messages the way verifiers do (2c84b11)
• keep a transporter assignable to the plain Transporter type (8bf55fb)
• shared: keep a colon in the user name of a connection or proxy url (6acf4b6)
• shared: refuse URL hosts the legacy parser would truncate (17a5068)
• shared: resolve hostnames when the runtime has no interface table (8b03240)
• smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)
• smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)
• smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)
• well-known: keep nodemailer/lib/well-known/services.json available (367730c)

v9.1.1

9.1.1 (2026-09-01)

Bug Fixes

• mailer: apply the message access policy in resolveContent (dc48ed3)
• mailer: keep message data from reopening the access sandbox (ab7ef34)
• mime-node: inherit the access policy from the tree a node hangs in (262d550)

v9.1.0

9.1.0 (2026-08-31)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

10.0.1 (2026-09-07)

Bug Fixes

• types: accept an explicit undefined for optional properties (209719d), closes #1853
• types: drop the internal members from the published declarations (81e64ea)

10.0.0 (2026-09-03)

⚠ BREAKING CHANGES

• Node.js 20 or newer is required. The Node.js 6 syntax compatibility check and the .npmignore file are gone.

Features

• keep the @​types/nodemailer type layout working (1cc5356)
• migrate to TypeScript with ES module and CommonJS builds (f7cbf83)

Bug Fixes

• apply the other keys of a configuration object next to its url (29610f9)
• dkim: canonicalize raw messages the way verifiers do (2c84b11)
• keep a transporter assignable to the plain Transporter type (8bf55fb)
• shared: keep a colon in the user name of a connection or proxy url (6acf4b6)
• shared: refuse URL hosts the legacy parser would truncate (17a5068)
• shared: resolve hostnames when the runtime has no interface table (8b03240)
• smtp-connection: clear the timers of a connection dropped before the greeting (01dcaa0)
• smtp-connection: keep an incomplete server reply out of lastServerResponse (1a6e427)
• smtp-pool: free the pool slot when the proxy socket can not be opened (204a344)
• well-known: keep nodemailer/lib/well-known/services.json available (367730c)

9.1.1 (2026-09-01)

Bug Fixes

• mailer: apply the message access policy in resolveContent (dc48ed3)
• mailer: keep message data from reopening the access sandbox (ab7ef34)
• mime-node: inherit the access policy from the tree a node hangs in (262d550)

9.1.0 (2026-08-31)

Features

• mailer: cap recipients per message with maxRecipients (7279ac8)

... (truncated)

Commits

• 40d5221 chore(master): release 10.0.1 (#1854)
• 81e64ea fix(types): drop the internal members from the published declarations
• c5dba6e chore: turn on exactOptionalPropertyTypes for the type-check
• 209719d fix(types): accept an explicit undefined for optional properties
• 2ee030c chore(master): release 10.0.0 (#1852)
• 8bf55fb fix: keep a transporter assignable to the plain Transporter type
• 62202a8 docs: mark 10.x as the supported security line
• d9316d1 refactor(punycode): write the RFC 3490 separators as escape sequences
• d1d3fb5 test(dkim): cover the signing failure path
• 1a6e427 fix(smtp-connection): keep an incomplete server reply out of lastServerResponse
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates imapflow from 1.3.3 to 1.7.8

Changelog

Sourced from imapflow's changelog.

1.7.8 (2026-09-01)

Bug Fixes

• download: keep the pipeline error forwarder across a backpressure wait (c6b2ed7)

1.7.7 (2026-08-31)

Bug Fixes

• deps: update encoding-japanese to 2.3.0 for the CP932 extended areas (8ae7ea4)

1.7.6 (2026-08-24)

Bug Fixes

• errors: stop a re-stamped rejection carrying the previous site's markers (ffd266c)

1.7.5 (2026-08-24)

Bug Fixes

• errors: give an IDLE-break waiter its own rejection site (9534551)

1.7.4 (2026-08-24)

Bug Fixes

• search: normalize search dates so invalid values cannot throw or emit NaN (bf6c6bb), closes #385

1.7.3 (2026-08-24)

Bug Fixes

• errors: make the rejection guard structural and stamp every connection error (67a4afc)
• errors: name the rejection site on connection errors and guard the IDLE preCheck waiter (55764f0)

1.7.2 (2026-08-21)

Bug Fixes

• envelope: stop inventing an address from a NIL host field (253a7b0)
• types: accept string[] paths in status, getQuota, append, copy and move (92f3607), closes #382

... (truncated)

Commits

• 52df440 chore(master): release 1.7.8 [skip-ci] (#390)
• c6b2ed7 fix(download): keep the pipeline error forwarder across a backpressure wait
• 763875e chore(master): release 1.7.7 [skip-ci] (#389)
• 8ae7ea4 fix(deps): update encoding-japanese to 2.3.0 for the CP932 extended areas
• 582d894 chore(master): release 1.7.6 [skip-ci] (#388)
• ffd266c fix(errors): stop a re-stamped rejection carrying the previous site's markers
• 85af39e chore(master): release 1.7.5 [skip-ci] (#387)
• 9534551 fix(errors): give an IDLE-break waiter its own rejection site
• 57350bc chore(master): release 1.7.4 [skip-ci] (#386)
• d775b4c chore(deps): refresh lockfile
• Additional commits viewable in compare view