fix: update dependency nodemailer to v8

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
nodemailer (source)	^7.0.12 → ^8.0.0
@types/nodemailer (source)	^7.0.4 → ^8.0.0

---

Release Notes

nodemailer/nodemailer (nodemailer)

v8.0.8

Compare Source

Bug Fixes

• enforce strict TLS for OAuth2 and Ethereal credential requests (#​1818) (833d6e5)
• four listener/stream leaks in SMTP transport, connection, pool (#​1817) (850bb91)

v8.0.7

Compare Source

Bug Fixes

• keep domain as UTF-8 when local part is non-ASCII (#​1814) (66d4ecb)

v8.0.6

Compare Source

Bug Fixes

• restore base64 wrap() trim behavior to prevent trailing CRLF (#​1810) (#​1811) (b1ae6c1)

v8.0.5

Compare Source

Bug Fixes

• decode SMTP server responses as UTF-8 at line boundary (95876b1)
• sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)

v8.0.4

Compare Source

Bug Fixes

• sanitize envelope size to prevent SMTP command injection (2d7b971)

v8.0.3

Compare Source

Bug Fixes

• clean up addressparser and fix group name fallback producing undefined (9d55877)
• fix cookie bugs, remove dead code, and improve hot-path efficiency (e8c8b92)
• refactor smtp-connection for clarity and add Node.js 6 syntax compat test (c5b48ea)
• remove familySupportCache that broke DNS resolution tests (c803d90)

v8.0.2

Compare Source

Bug Fixes

• merge fragmented display names with unquoted commas in addressparser (fe27f7f)

v8.0.1

Compare Source

Bug Fixes

• absorb TLS errors during socket teardown (7f8dde4)
• absorb TLS errors during socket teardown (381f628)
• Add Gmail Workspace service configuration (#​1787) (dc97ede)

v8.0.0

Compare Source

⚠ BREAKING CHANGES

• Error code 'NoAuth' renamed to 'ENOAUTH'

Bug Fixes

• add connection fallback to alternative DNS addresses (e726d6f)
• centralize and standardize error codes (45062ce)
• harden DNS fallback against race conditions and cleanup issues (4fa3c63)
• improve socket cleanup to prevent potential memory leaks (6069fdc)

v7.0.13

Compare Source

Bug Fixes

• downgrade transient connection error logs to warn level (4c041db)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[davidsandoz]

Hello @dword-design,

Is there any plan to eventually tackle this update?

There are two known vulnerabilities with Nodemailer that are fixed with v8.0.5 and no patch for v7.

• GHSA-vvjj-xcjg-gr5g
• GHSA-c7w3-x93f-qmm8

[github-actions]

🎉 This PR is included in version 8.0.5 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀