deps: update mail parsing, Electron, test DOM and tooling packages#30

merged1
stack/release-retry
stack/deps
opened7d agobySScreen
View on GitHubTwo-way sync enabledPR last imported 7d ago

Summary

Top of the stack. Folds in Dependabot #14, #15, #16, #17, #19, #20, #21 and #22 (#18 @types/node 26 is excluded: Electron 44 ships Node 24). Merging this PR triggers the release build.

PackageVersion
mailparser / nodemailer3.12.4 / 10.2.1
electron / electron-updater44.9.3 / 6.8.11 (pinned)
electron-builder, express, react, zod26.18.0, 5.3.0, 19.3.1, 4.6.7
jsdom / happy-dom / htmlparser230.1.3 / 21.0.4 / 12.0.0
concurrently, fast-uri, undici10.0.6, 3.1.9, 7.30.1 and 6.29.1

mailparser 3.10+ stopped rejecting mail whose decoded HTML exceeds the 2 MB bound; it now resolves with empty text and sets textConversionError. The new parseMailSource keeps the old rejection:

diff
1 parseMessage
2- m = simpleParser(source, mimeParserOptions)
3+ m = parseMailSource(source) # throws textConversionError

jsdom 30 computes 0.85em margins as 13.6px; src/message-style.test.tsx expects the computed value.

Evidence

  • Before: with these bumps and no code change, server/resource-limits.test.ts "HTML-to-text conversion has a decoded input bound" fails (missing rejection) and src/message-style.test.tsx fails (13.6px vs 0.85em).
  • After: npm test 1047 pass, 0 fail, 39 skipped; npm run build and check:desktop (Electron 44.9.3, Windows) pass. Removing the throw makes the HTML-bound test fail again.

Merge Danger

Door: two-way

Blast Radius: app-wide

Electron and mail parsing updates affect every platform build; this PR starts the release.


View with [code]smith Autofix with [code]smith Need help on this PR? Tag @codesmith-bot with what you need.

Added 1 commit

  • deps: update mail parsing, Electron, test DOM and tooling packagesb4d4900