Skip to content

Bump postal-mime from 2.7.6 to 3.0.0 - #13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/postal-mime-3.0.0
Open

Bump postal-mime from 2.7.6 to 3.0.0#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/postal-mime-3.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps postal-mime from 2.7.6 to 3.0.0.

Release notes

Sourced from postal-mime's releases.

v3.0.0

3.0.0 (2026-08-11)

⚠ BREAKING CHANGES

  • header values in headers[].value keep the whitespace that folding introduced instead of having every whitespace run collapsed to a single space, single value headers such as subject and from resolve to the first occurrence of a duplicated header rather than the last, and to, cc, bcc and replyTo are returned in document order rather than reversed.

Bug Fixes

  • resolve non-WHATWG charset labels instead of falling back to windows-1252 (6378618), closes #94
  • unfold headers per RFC 5322 and resolve duplicated headers first-wins (7b0ca9d)
Changelog

Sourced from postal-mime's changelog.

3.0.0 (2026-08-11)

⚠ BREAKING CHANGES

  • header values in headers[].value keep the whitespace that folding introduced instead of having every whitespace run collapsed to a single space, single value headers such as subject and from resolve to the first occurrence of a duplicated header rather than the last, and to, cc, bcc and replyTo are returned in document order rather than reversed.

Bug Fixes

  • resolve non-WHATWG charset labels instead of falling back to windows-1252 (6378618), closes #94
  • unfold headers per RFC 5322 and resolve duplicated headers first-wins (7b0ca9d)
Commits
  • e7c35dd chore(master): release 3.0.0 (#95)
  • 7b0ca9d fix!: unfold headers per RFC 5322 and resolve duplicated headers first-wins
  • a97e8a8 test: assert charset shadowing against a label every runtime knows
  • 6378618 fix: resolve non-WHATWG charset labels instead of falling back to windows-1252
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [postal-mime](https://github.com/postalsys/postal-mime) from 2.7.6 to 3.0.0.
- [Release notes](https://github.com/postalsys/postal-mime/releases)
- [Changelog](https://github.com/postalsys/postal-mime/blob/master/CHANGELOG.md)
- [Commits](postalsys/postal-mime@v2.7.6...v3.0.0)

---
updated-dependencies:
- dependency-name: postal-mime
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 26, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedpostal-mime@​3.0.010010010093100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file gatekeeper javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants