search

craigk5n / webcalendar

WebCalendar is a PHP application used to maintain a calendar for a single user or an intranet group of users. It can also be configured as an event calendar.
http://www.k5n.us/webcalendar.php
GNU General Public License v2.0
148 stars 70 forks source link

Bump phpmailer/phpmailer from 6.5.4 to 6.8.1 #401

Closed dependabot[bot] closed 10 months ago

dependabot[bot] commented 10 months ago

Bumps phpmailer/phpmailer from 6.5.4 to 6.8.1.

Release notes

Sourced from phpmailer/phpmailer's releases.

PHPMailer 6.8.1

This is a minor maintenance release.

Minor security note

The DSN support added in 6.8.0 reflects the DSN back to the user in an error message if it is invalid. If a DSN uses user-supplied input (a very bad idea), it opens a distant possibility of XSS if the host app does not escape output. In an abundance of caution, malformed DSNs are no longer reflected in error messages.

Changes

  • Don't reflect malformed DSNs in error messages to avert any risk of XSS
  • Improve Simplified Chinese, Sinhalese, and Norwegian translations
  • Don't use setAccessible in PHP >= 8.1 in tests
  • Avoid a deprecation notice in PHP 8.3
  • Fix link in readme

PHPMailer 6.8.0

This is a maintenance release with a new feature: DSN URL parsing, added by @​voronkovich. This allows you to create a PHPMailer instance with most important settings by passing in a single URL, ideal for configuring PHPMailer from an environment variable.

Other changes:

  • Fix some name edge cases, expand tests
  • Add pattern for ZoneMTA message IDs
  • Improve Hindi translation

PHPMailer 6.7.1

  • Add official support for PHP 8.2 (on release day!)
  • Add PHP 8.3 to test suite with "experimental" status
  • Add ext-openssl to composer suggest list
  • Bump development dependencies

PHPMailer 6.7

  • Break out boundary definitions into a method (note that boundary format has also changed slightly)
  • Remove MIME preamble to match popular client behaviour, may help with DKIM too
  • Fix handling of trailing whitespace in simple DKIM canonicalisation
  • Fix some possible POP3 auth issues, including a TCP hang (thanks to @​czirkoszoltan)
  • Add Azure XOAUTH2 example and docs (thanks to @​greew)
  • Preserve errors during disconnect
  • Avoid some PHP 8.1 type issues
  • Update CI to run on Ubuntu 22.04

PHPMailer 6.6.5

This is a maintenance release

  • Don't try to issue RSET if there has been a connection error
  • Reject attempts to add folders as attachments
  • Don't suppress earlier error messages on close()
  • Handle Host === null better
  • Update Danish and Polish translations
  • Change recommendation for Microsoft OAuth package to thenetworg/oauth2-azure
  • Bump some GitHub action versions

Happy Hacktoberfest!

... (truncated)

Changelog

Sourced from phpmailer/phpmailer's changelog.

Version 6.8.1 (August 29th, 2023)

  • Don't reflect malformed DSNs in error messages to avert any risk of XSS
  • Improve Simplified Chinese, Sinhalese, and Norwegian translations
  • Don't use setAccessible in PHP >= 8.1 in tests
  • Avoid a deprecation notice in PHP 8.3
  • Fix link in readme

Version 6.8.0 (March 6th, 2023)

  • Add DSN parsing class, thanks to @​voronkovich
  • Fix some name edge cases, expand tests
  • Add pattern for ZonMTA message IDs
  • Improve Hindi translation

Version 6.7.1 (December 8th, 2022)

  • Add official support for PHP 8.2
  • Add PHP 8.3 to test suite with "experimental" status
  • Add ext-openssl to composer suggest list
  • Bump development dependencies

Version 6.7 (December 5th, 2022)

  • Break out boundary definitions into a method (note that boundary format has also changed slightly)
  • Remove MIME preamble to match popular client behaviour, may help with DKIM too
  • Fix handling of trailing whitespace in simple DKIM canonicalisation
  • Fix some possible POP3 auth issues, including a TCP hang (thanks to @​czirkoszoltan)
  • Add Azure XOAUTH2 example and docs (thanks to @​greew)
  • Preserve errors during disconnect
  • Avoid some PHP 8.1 type issues
  • Update CI to run on Ubuntu 22.04

Version 6.6.5 (October 7th, 2022)

  • Don't try to issue RSET if there has been a connection error
  • Reject attempts to add folders as attachments
  • Don't suppress earlier error messages on close()
  • Handle Host === null better
  • Update Danish and Polish translations
  • Change recommendation for Microsoft OAuth package to thenetworg/oauth2-azure
  • Bump some GitHub action versions

Version 6.6.4 (August 22nd, 2022)

  • Update Greek translation
  • Add text/csv MIME type
  • Fix DKIM when sending to anonymous group via mail()
  • Improve docs around auth following gmail & MS deprecations
  • Update GitHub action deps
  • Add OpenSSF Scorecard security health metrics

Version 6.6.3 (June 20th, 2022)

  • Add an HTML form to the OAuth setup script
  • Minor CS improvements

... (truncated)

Commits
  • e88da8d Fix test
  • 8db93b5 6.8.1
  • 397a4d4 Don't reflect a malformed DSN in error messages. It's not necessary, and carr...
  • fa59bf6 Don't use setAccessible in PHP >= 8.1
  • 267d4e5 Avoid deprecation warning in PHP 8.3
  • 71abcf9 Comments
  • 57f994d Merge pull request #2930 from Ayesh/lang/si
  • 83fdb21 Merge pull request #2929 from Ayesh/readme/langtest-path-update
  • aec8acc Add Sinhalese translations
  • b5d6e4e Readme: Update PHPMailerLangTest references to TranslationCompletenessTest
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
github-actions[bot] commented 10 months ago

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

dependabot[bot] commented 10 months ago

Looks like phpmailer/phpmailer is up-to-date now, so this is no longer needed.