Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025

Bumps node-email-verifier from 2.0.0 to 3.4.1.

Release notes

Sourced from node-email-verifier's releases.

3.4.1

Overview

This is a patch release that fixes a critical issue where the dist files were missing from the npm package in version 3.4.0.

What's Fixed

Missing dist files in npm package (#65)

  • Issue: The 3.4.0 release was missing dist/index.js and dist/index.d.ts files, causing TypeScript and module resolution issues
  • Cause: The dist/ directory was in .gitignore and npm was using it as the ignore file since no .npmignore existed
  • Solution: Added .npmignore file to explicitly control what gets published to npm while keeping dist/ out of git

Pre-release Checklist

  • All tests passing locally
  • Build completes successfully
  • .npmignore file created and configured
  • Version bumped to 3.4.1
  • CHANGELOG.md updated
  • Release notes created

Release Instructions

  1. Ensure you're on the release/3.4.1 branch
  2. Run all checks: npm run check
  3. Build the project: npm run build
  4. Verify dist files exist
  5. Commit all changes
  6. Create PR to main branch
  7. After merge, create signed tag on merge commit
  8. Publish to npm
  9. Create GitHub release

GitHub Release Notes

🐛 Bug Fix Release

This patch release fixes a critical packaging issue from v3.4.0.

What's Fixed

  • Fixed missing dist files in npm package (#65)
    • The npm package now correctly includes dist/index.js and dist/index.d.ts
    • Added .npmignore to ensure proper file inclusion in published packages
    • No code changes, only packaging configuration

... (truncated)

Changelog

Sourced from node-email-verifier's changelog.

[3.4.1] - 2025-07-16

Fixed

  • Fixed missing dist files in npm package by adding .npmignore file (#65)
    • dist/index.js and dist/index.d.ts were excluded from npm package due to .gitignore
    • Added .npmignore to ensure dist files are included while keeping them out of git

Added

  • Added sponsorship information to README with links to support the project
  • Added sponsor badge to encourage community support
  • Enhanced prepublishOnly hook to run comprehensive validation before npm publish
  • Added package size enforcement (1MB limit) to local validation
  • Enhanced pre-push git hook to validate packages on main/release branches
  • Updated release documentation with automatic safeguards explanation

[3.4.0] - 2025-06-24

Added

  • MX Record Caching with LRU Eviction Strategy (PR #51):
    • TTL-based caching with configurable default TTL (5 minutes) and max cache size (1000 entries)
    • LRU (Least Recently Used) eviction strategy that keeps frequently accessed domains in memory
    • Cache statistics tracking (hits, misses, evictions, hit rate) included in detailed validation results
    • Global cache management with flush, delete, and reset statistics methods
    • 7.7x performance improvement with realistic DNS latency (25ms)
    • 87%+ cache hit rate in typical usage patterns with mixed domain popularity
    • 872 DNS lookups avoided out of 1000 requests (87.2% reduction)
    • Automatic periodic cleanup of expired entries to prevent memory accumulation
    • Comprehensive performance benchmarks demonstrating real-world improvements
  • Enhanced TypeScript Support (PR #57):
    • Export EmailValidationError class and isEmailValidationError helper function for better error handling
    • All major interfaces and types now exported: MxRecord, ValidationResult, EmailValidatorOptions, CacheStatistics, MxCacheOptions
    • Comprehensive JSDoc documentation on all public APIs

[3.3.0] - 2025-06-22

Added

  • AI Debug Mode (debug: true option) for enhanced debugging and observability:
    • Structured JSON logging with MCP-compatible format
    • Performance timing for each validation phase
    • Memory usage tracking (heap, RSS, external)
    • Detailed error logging with stack traces
    • Debug mode example demonstrating production usage patterns
  • Examples directory with comprehensive usage examples:

... (truncated)

Commits
  • 9c4f586 fix: prevent destructive dist directory deletion during tests
  • 563906d fix: prevent broken npm releases with multi-layer validation
  • 0dc823d refactor: move arrow
  • 325127d docs: add sponsorship info
  • 131c35d chore: prepare for 3.4.1 release
  • 3e44ae9 docs: update CHANGELOG for v3.4.0 release
  • d7a9f71 chore: bump version to 3.4.0
  • 186abca fix: resolve shell command injection vulnerabilities in tests
  • 0547aa9 docs: update documentation for enhanced typescript exports
  • a535b1e feat: export additional typescript types for better dx
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [node-email-verifier](https://github.com/jesselpalmer/node-email-verifier) from 2.0.0 to 3.4.1.
- [Release notes](https://github.com/jesselpalmer/node-email-verifier/releases)
- [Changelog](https://github.com/jesselpalmer/node-email-verifier/blob/main/CHANGELOG.md)
- [Commits](jesselpalmer/node-email-verifier@2.0.0...3.4.1)

---
updated-dependencies:
- dependency-name: node-email-verifier
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 22, 2025
@BaseMax BaseMax merged commit 31950e2 into master Sep 22, 2025
4 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/node-email-verifier-3.4.1 branch September 22, 2025 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants