Bump net-imap from 0.5.6 to 0.5.7

[dependabot]

Bumps net-imap from 0.5.6 to 0.5.7.

Release notes

Sourced from net-imap's releases.

v0.5.7

What's Changed

🔒 Security

This release adds two features to prevent unbounded memory use: the response_handlers keyword argument to Net::IMAP.new (ruby/net-imap#419) so response handlers can be added before the server can send any responses, and the max_response_size config attribute (ruby/net-imap#444, GHSA-j3g3-5qv5-52mj, CVE-2025-43857, reported by @​Masamuneee).

[!NOTE] The default max_response_size is extremely high, to avoid issues with secure connections to trusted servers that are well-behaved. It can be configured more conservatively to guard against untrusted servers (for example, connecting to user-provided hostnames). It is the responsibility of net-imap users to configure their client appropriately for the server they are connecting to.

Added

• ✨ Track IMAP connection state by @​nevans in ruby/net-imap#416
• ✨ Add response_handlers kwarg to Net::IMAP.new by @​nevans in ruby/net-imap#419
• ✨ Customize SequenceSet YAML serialization by @​nevans in ruby/net-imap#432
• ✨ Limit max_response_size by @​nevans in ruby/net-imap#444

Documentation

• 📚 Improve docs for unbounded memory use and thread safety by @​nevans in ruby/net-imap#418
• 📚 Impove SequenceSet docs by @​nevans in ruby/net-imap#420
• 📚 Doc improvements for open_timeout, etc by @​nevans in ruby/net-imap#424

Other Changes

• ♻️ Reorganize Config.version_defaults creation by @​nevans in ruby/net-imap#412
• ♻️ Refactor Config attr type coercion by @​nevans in ruby/net-imap#417
• ♻️ Refactor Net::IMAP#get_response (internal) by @​nevans in ruby/net-imap#422
• ♻️ Rational config versions by @​nevans in ruby/net-imap#429
• ♻️ Extract ResponseReader from get_response by @​nevans in ruby/net-imap#433
• ♻️ Refactor ResponseReader by @​nevans in ruby/net-imap#435

Miscellaneous

• Bump step-security/harden-runner from 2.10.4 to 2.11.0 by @​dependabot in ruby/net-imap#409
• ✅ Make FakeServer more robust against disconnect by @​nevans in ruby/net-imap#414
• ✅ Improvements to FakeServer (tests only) by @​nevans in ruby/net-imap#415
• ✅ Ignore more IO errors in some FakeServer tests by @​nevans in ruby/net-imap#421
• ⬆️ Bump step-security/harden-runner from 2.11.0 to 2.11.1 by @​dependabot in ruby/net-imap#423

Full Changelog: ruby/net-imap@v0.5.6...v0.5.7

Commits

• 364869b 🔖 Bump version to v0.5.7
• 10137ba 🔀 Merge pull request #444 from ruby/limit-response-size
• b6bdee2 ✨ Make max_response_size configurable
• 0ae8576 ✨ Limit max response size to 512MiB (hard-coded)
• b32b675 ♻️ Save ResponseReader ivars: @​buff & @​literal_size
• d28879e 🔀 Merge pull request #433 from ruby/response_reader
• 18bc621 ♻️ Extract ResponseReader from get_response
• b1413c6 ✨ Customize SequenceSet YAML serialization
• d839268 🔀 Merge pull request #429 from ruby/rational-config-versions
• c7732e6 ♻️ Add default_proc to Config.version_defaults
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[Obsiye]

@dependabot rebase