chore(deps): bump the npm group with 7 updates

[dependabot]

Bumps the npm group with 7 updates:

Package	From	To
nodemailer	10.0.1	10.0.10
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
resend	6.26.0	6.28.1
@types/node	26.5.0	26.6.1
@types/nodemailer	8.0.1	8.0.2
@types/react-dom	19.2.7	19.3.0

Updates nodemailer from 10.0.1 to 10.0.10

Release notes

Sourced from nodemailer's releases.

v10.0.10

10.0.10 (2026-09-14)

Bug Fixes

• derive the attachment filename from the basename of a Windows path (c7cc7ce)
• dkim: unfold folded header lines in linear time (28a5909)
• smtp-connection: reassemble multiline replies in linear time (f2d82fa)

v10.0.9

10.0.9 (2026-09-12)

Bug Fixes

• addressparser: bound the '@' probe to the run being scanned (1465c3f)
• addressparser: keep the text after a comment out of a quoted local part address (2f36eb1)

v10.0.8

10.0.8 (2026-09-11)

Bug Fixes

• mime-node: clean the boundary where it is written, not only where it is built (e14278d)
• mime-node: drop every control character from multipart boundary material (a82a355)

v10.0.7

10.0.7 (2026-09-11)

Bug Fixes

• mime-funcs: do not double encode Buffer input when chunking base64 mime words (#1865) (4327a59)
• mime-node: keep a boundary that is only line breaks from stripping to empty (ec46800)
• mime-node: strip line breaks from multipart boundary material (#1867) (03c1a5c)
• smtp-pool: release rate-limited connections on close (#1866) (7f5c7a4)

v10.0.6

10.0.6 (2026-09-11)

Bug Fixes

• addressparser: scan free text for an address in linear time (437d7fc)

v10.0.5

10.0.5 (2026-09-11)

... (truncated)

Changelog

Sourced from nodemailer's changelog.

Commits

• a67b182 chore(master): release 10.0.10 (#1873)
• f2d82fa fix(smtp-connection): reassemble multiline replies in linear time
• 28a5909 fix(dkim): unfold folded header lines in linear time
• c7cc7ce fix: derive the attachment filename from the basename of a Windows path
• 5a35d59 chore(master): release 10.0.9 (#1871)
• 2f36eb1 fix(addressparser): keep the text after a comment out of a quoted local part ...
• 1465c3f fix(addressparser): bound the '@' probe to the run being scanned
• 1732dc4 chore(deps): update dev dependencies
• ec7eda6 chore(deps): update dev dependencies
• 618f912 chore(master): release 10.0.8 (#1870)
• Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• 3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
• Additional commits viewable in compare view

Updates @types/react from 19.2.18 to 19.3.0

Commits

• See full diff in compare view

Updates resend from 6.26.0 to 6.28.1

Release notes

Sourced from resend's releases.

v6.28.1

What's Changed

• fix(deps): update dependency next to v16.3.3 [security] by @​renovate[bot] in resend/resend-node#1034
• chore(deps): update dependency pkg-pr-new to v0.0.88 by @​renovate[bot] in resend/resend-node#944
• chore(deps): update dependency tsdown to v0.23.0 by @​renovate[bot] in resend/resend-node#950
• chore(deps): update pnpm to v11.27.0 by @​renovate[bot] in resend/resend-node#1019
• fix(deps): update react monorepo to v19.3.0 by @​renovate[bot] in resend/resend-node#1040
• fix(deps): update dependency postal-mime to v2.7.6 - autoclosed by @​renovate[bot] in resend/resend-node#1060
• fix(deps): update dependency esbuild to v0.28.2 by @​renovate[bot] in resend/resend-node#1062
• chore(deps): update dependency vitest to v4.1.11 [security] by @​renovate[bot] in resend/resend-node#1090
• fix(deps): update dependency standardwebhooks to v1.1.1 by @​renovate[bot] in resend/resend-node#1093
• chore(deps): update dependency @​types/node to v24.13.4 by @​renovate[bot] in resend/resend-node#1096
• fix(deps): update dependency next to v16.3.5 by @​renovate[bot] in resend/resend-node#1098
• chore: publish releases from GitHub Actions with npm provenance by @​felipefreitag in resend/resend-node#1097
• chore: bump version to 6.28.1 by @​felipefreitag in resend/resend-node#1100
• fix: decide the release channel with POSIX shell by @​felipefreitag in resend/resend-node#1101

Full Changelog: resend/resend-node@v6.28.0...v6.28.1

v6.28.1-preview-inboxes.0

Full Changelog: resend/resend-node@v6.28.1...v6.28.1-preview-inboxes.0

v6.28.0

What's Changed

• feat(broadcasts): add duplicate() by @​gabrielmfern in resend/resend-node#1094

Full Changelog: resend/resend-node@v6.27.0...v6.28.0

v6.27.0

What's Changed

• feat(webhooks): add rotateSigningSecret() by @​gabrielmfern in resend/resend-node#1089

Full Changelog: resend/resend-node@v6.26.0...v6.27.0

Commits

• 7743218 fix: decide the release channel with POSIX shell (#1101)
• 8be6448 chore: bump version to 6.28.1 (#1100)
• d5a7a21 chore: publish releases from GitHub Actions with npm provenance (#1097)
• 7542f04 fix(deps): update dependency next to v16.3.5 (#1098)
• 9a43fae chore(deps): update dependency @​types/node to v24.13.4 (#1096)
• 8f8953e fix(deps): update dependency standardwebhooks to v1.1.1 (#1093)
• 7463081 chore(deps): update dependency vitest to v4.1.11 [security] (#1090)
• eb45627 fix(deps): update dependency esbuild to v0.28.2 (#1062)
• 48811dd fix(deps): update dependency postal-mime to v2.7.6 (#1060)
• f5c76e9 fix(deps): update react monorepo to v19.3.0 (#1040)
• Additional commits viewable in compare view

Updates @types/node from 26.5.0 to 26.6.1

Commits

• See full diff in compare view

Updates @types/nodemailer from 8.0.1 to 8.0.2

Commits

• See full diff in compare view

Updates @types/react from 19.2.18 to 19.3.0

Commits

• See full diff in compare view

Updates @types/react-dom from 19.2.7 to 19.3.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions