From 0ff8b9151ab0aae137b29b10bb0f6a7e00c65549 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Thu, 10 Sep 2026 12:31:08 +0000 Subject: [PATCH 1/2] chore: upgrade nodemailer to 9.1.1 Refreshes the yarn.lock entry for nodemailer from 9.0.1 to 9.1.1. The existing `^9.0.1` range in packages/web already admitted the patched version, so no manifest change or resolution override is needed. Addresses GHSA-2x7j-588g-ccc2, GHSA-8m3c-c648-2xjj, GHSA-cc9r-2j5m-2m83 and GHSA-wmmp-3585-3rmp. Co-Authored-By: Claude Opus 5 (1M context) --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 0a6a1934e..2527f2e5f 100644 --- a/yarn.lock +++ b/yarn.lock @@ -18554,9 +18554,9 @@ __metadata: linkType: hard "nodemailer@npm:^9.0.1": - version: 9.0.1 - resolution: "nodemailer@npm:9.0.1" - checksum: 10c0/4213f01aa211127c1ce33243c5e45e7f831601a933d03fa864cd827b1bd5ea2782cb4b43722bee7028cbc193733d9802dad1120fe67181448eb0b7de52218a37 + version: 9.1.1 + resolution: "nodemailer@npm:9.1.1" + checksum: 10c0/b213a2a906697a735f6eb21103629b7a77aeac297b6d843efd4588157999bf6d19381853ac1224e472f5a34aec2e2412444151a2c6ec6e8c52150afa3055039c languageName: node linkType: hard From 3a3d135a2cfe34967f1bc8f526eebfaa87ccbfc2 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Thu, 10 Sep 2026 12:31:34 +0000 Subject: [PATCH 2/2] Update changelog Co-Authored-By: Claude Opus 5 (1M context) --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index e091548b4..f876cc8df 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### Fixed +- Upgraded `nodemailer` to `9.1.1`. [#1642](https://github.com/sourcebot-dev/sourcebot/pull/1642) + ## [5.1.11] - 2026-09-10 ### Added