Skip to content

chore(deps): bump the production-dependencies group with 2 updates - #76

Merged
JOhnsonKC201 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-a025e7eba6
Oct 9, 2026
Merged

JOhnsonKC201 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-a025e7eba6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates: imapflow and node-ical.

Updates imapflow from 2.1.2 to 2.2.6

Changelog

Sourced from imapflow's changelog.

2.2.6 (2026-10-06)

Bug Fixes

  • harden response parsing and command compilation found by fuzzing (85b842a)
  • read digit-led atoms like "2024:Q1" instead of dropping the response line (47bf6ec)

2.2.5 (2026-10-04)

Bug Fixes

  • deps: update libbase64 to 1.3.2, libmime to 5.4.7 and mailsplit to 5.4.20 (fe10c6a)

2.2.4 (2026-10-03)

Bug Fixes

  • deps: hold pino at 10.3.x to match EmailEngine (65062e0)

2.2.3 (2026-10-03)

Bug Fixes

  • reject NUL in a non-ASCII search value instead of sending it as a literal (8c35084)
  • send non-ASCII search values as literals (b58d93e), closes #417

2.2.2 (2026-10-03)

Bug Fixes

  • do not let a flag update that reduces to nothing clear every flag (686a04b)
  • keep append flags when the destination is not an open read-write mailbox (d7f8da3), closes #415

2.2.1 (2026-10-01)

Bug Fixes

  • do not enable IMAP4rev2 on Strato RZimapd (dce30f8), closes #411

2.2.0 (2026-10-01)

Features

... (truncated)

Commits
  • e4ce9e3 Merge pull request #421 from postalsys/release-please--branches--master--comp...
  • b8e6ec4 chore(master): release 2.2.6 [skip-ci]
  • 47bf6ec fix: read digit-led atoms like "2024:Q1" instead of dropping the response line
  • 5493137 test: add seeded fuzzing, server transcript replay and mutation testing
  • 85b842a fix: harden response parsing and command compilation found by fuzzing
  • 86a77d6 chore(deps): refresh dev dependencies (typescript-eslint 8.71.1) [skip ci]
  • ca0fb63 Merge pull request #420 from postalsys/release-please--branches--master--comp...
  • 560a422 chore(master): release 2.2.5 [skip-ci]
  • fe10c6a fix(deps): update libbase64 to 1.3.2, libmime to 5.4.7 and mailsplit to 5.4.20
  • 65f7b32 Merge pull request #419 from postalsys/release-please--branches--master--comp...
  • Additional commits viewable in compare view

Updates node-ical from 0.27.2 to 0.27.3

Release notes

Sourced from node-ical's releases.

0.27.3

What's Changed

New Contributors

Full Changelog: jens-maus/node-ical@0.27.2...0.27.3

Commits
  • cb9b911 update
  • c6e2502 Preserve early years in date-only parsing and recurrence expansion (#559)
  • 9eccabf chore(deps): bump github/codeql-action from 4.37.3 to 4.38.2 (#570)
  • cd983a4 chore(deps-dev): bump brace-expansion from 5.0.9 to 5.0.12 (#569)
  • be7afa3 chore(deps-dev): bump moment from 2.30.1 to 2.31.0 (#568)
  • 3ca2125 chore(deps-dev): bump serialize-javascript from 7.1.1 to 7.1.2 (#567)
  • 49c6087 fix: preserve literal backslashes in calendar text (#558)
  • a91f362 refactor: upgrade XO and align module types (#557)
  • fb58d5a chore(deps-dev): bump moment-timezone from 0.6.3 to 0.6.4 (#566)
  • 3f32c6f chore(deps): bump temporal-polyfill from 1.0.4 to 1.0.5 (#563)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates: [imapflow](https://github.com/postalsys/imapflow) and [node-ical](https://github.com/jens-maus/node-ical).


Updates `imapflow` from 2.1.2 to 2.2.6
- [Release notes](https://github.com/postalsys/imapflow/releases)
- [Changelog](https://github.com/postalsys/imapflow/blob/master/CHANGELOG.md)
- [Commits](postalsys/imapflow@v2.1.2...v2.2.6)

Updates `node-ical` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/jens-maus/node-ical/releases)
- [Commits](jens-maus/node-ical@0.27.2...0.27.3)

---
updated-dependencies:
- dependency-name: imapflow
  dependency-version: 2.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: node-ical
  dependency-version: 0.27.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from JOhnsonKC201 as a code owner October 9, 2026 10:56
@vercel

vercel Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
pixelcat Ready Ready Preview Oct 9, 2026 10:56am UTC

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 9, 2026
@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown

CI for 0ac913e: all jobs passed

Job Result Log
boot (macos-latest) passed open
packaged-boot (macos-latest) passed open
boot (windows-latest) passed open
test passed open
packaged-boot (windows-latest) passed open

Tests: 526 passed, 0 failed, 0 skipped, 526 total.

This comment updates itself on every push. Full run.

@JOhnsonKC201
JOhnsonKC201 merged commit 9cf6e5e into main Oct 9, 2026
9 checks passed
@JOhnsonKC201
JOhnsonKC201 deleted the dependabot/npm_and_yarn/production-dependencies-a025e7eba6 branch October 9, 2026 14:45

This branch was successfully deployed

1 active deployment
Preview — 0ac913e8 Deployed Oct 9, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant