chore(deps): bump org.simplejavamail:simple-java-mail from 8.8.0 to 8.9.0

[dependabot[bot]]

Bumps org.simplejavamail:simple-java-mail from 8.8.0 to 8.9.0.

Release notes

Sourced from org.simplejavamail:simple-java-mail's releases.

v8.9.0 - Security update

#507: [security] Update 3rd party dependencies to get rid of all currently known CVE issues

Changes:

Dependencies:

• Spring 5.3.27 -> 5.3.34
• Spring Boot 2.5.15 -> 2.7.18
• commons-io 2.7 -> 2.11.0
• utils-mail-smime 2.3.1 -> 2.3.3
  • org.bouncycastle:bcjmail-jdk15to18 1.75 -> org.bouncycastle:bcjmail-jdk18on 1.78.1
• ical4j 2.2.4 -> ical4j-vcard 2.0.0-beta2

Other:

• Junit 4 -> Junit 5 (including Mockito, AssertJ and got rid of Powermock)
• maven-surefire-plugin 2.19.1 -> 3.2.5

v8.8.4 CVE smime-module (bouncycastle)

#506: [CVE] Upgrade utils-mail-smime dependency to 2.3.2, to resolve CVE issue in bouncycastle

v8.8.3

#502: [Bug] Message headers not treated with case insensitivity as per RFC, causing deviating headers to slip through the filters

v8.8.2

• #495: Add config support for 'verifyingServerIdentity' with SMTP, also: since Angus 1.1.0 (8.6.0) server identity checks are on by default and can be countered by mailerBuilder.verifyingServerIdentity(false)
• #501: [dependency] Update outlook-message-parser dependency, which has improved support for X500 addresses
• #499 (fix): [maintenance] Added missing finer-grained DKIM Spring Boot properties

v8.8.1

#500: [bug] Fix parsing addresses from headers in EML files, like a Disposition-Notification-To with umlaut

Changelog

Sourced from org.simplejavamail:simple-java-mail's changelog.

v8.9.0 (26-April-2024)

• #507: [security] Update 3rd party dependencies to get rid of all currently known CVE issues (see issue for details)

Commits

• 687ac7f released 8.9.0 [skip ci]
• d09e642 Merge branch 'refs/heads/develop'
• 04a91b9 Preparing release 8.9.0
• 080c5df Update utils-mail-smime version to 2.3.3, which upgrades to new bouncycastle ...
• 42a268f minor pom cleanup [skip ci]
• 728eff9 Merge branch 'refs/heads/master' into develop
• 15532bb released 8.8.4 [skip ci]
• 4177f67 Preparing release 8.8.4
• e6e4d19 Merge pull request #506 from rover886/patch-1
• 89656bc Update pom.xml
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)