deps: update mail parsing, Electron, test DOM and tooling packages#30
Summary
Top of the stack. Folds in Dependabot #14, #15, #16, #17, #19, #20, #21 and #22 (#18 @types/node 26 is excluded: Electron 44 ships Node 24). Merging this PR triggers the release build.
| Package | Version |
|---|---|
| mailparser / nodemailer | 3.12.4 / 10.2.1 |
| electron / electron-updater | 44.9.3 / 6.8.11 (pinned) |
| electron-builder, express, react, zod | 26.18.0, 5.3.0, 19.3.1, 4.6.7 |
| jsdom / happy-dom / htmlparser2 | 30.1.3 / 21.0.4 / 12.0.0 |
| concurrently, fast-uri, undici | 10.0.6, 3.1.9, 7.30.1 and 6.29.1 |
mailparser 3.10+ stopped rejecting mail whose decoded HTML exceeds the 2 MB bound; it now resolves with empty text and sets textConversionError. The new parseMailSource keeps the old rejection:
diff
| 1 | parseMessage |
| 2 | - m = simpleParser(source, mimeParserOptions) |
| 3 | + m = parseMailSource(source) # throws textConversionError |
jsdom 30 computes 0.85em margins as 13.6px; src/message-style.test.tsx expects the computed value.
Evidence
- Before: with these bumps and no code change,
server/resource-limits.test.ts"HTML-to-text conversion has a decoded input bound" fails (missing rejection) andsrc/message-style.test.tsxfails (13.6pxvs0.85em). - After:
npm test1047 pass, 0 fail, 39 skipped;npm run buildandcheck:desktop(Electron 44.9.3, Windows) pass. Removing the throw makes the HTML-bound test fail again.
Merge Danger
Door: two-way
Blast Radius: app-wide
Electron and mail parsing updates affect every platform build; this PR starts the release.
View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need.
Added 1 commit
- deps: update mail parsing, Electron, test DOM and tooling packagesb4d4900