[dependabot]

Bumps the default group with 3 updates in the / directory: nano, nodemailer and supertest.

Updates nano from 11.0.7 to 11.0.8

Release notes

Sourced from nano's releases.

11.0.8

• Fixes bug where query string parameters supplied as undefined would become the string "undefined" in API calls.
• Fixes bug where the request promise was not rejected properly.
• Fixes some TypeScript definitions.
• Aligns CONTRIBUTING.md with the Apache CouchDB project.
• Correctly documents how to override the HTTP agent with agentOptions.
• Update dev dependencies, particularly v8 of Undici.

Commits

• d0471d8 11.0.8 (#385)
• 86ee79a Correctly document agent options (#383)
• 9e16b68 Add new CONTRIBUTING.md to more closely align with main CouchDB project (#384)
• 0a3b91c fix TypeScript definitions for parseUrl, agentOptions and RequestError.reques...
• 31be367 reject the request promise when reading a response body fails. Fixes issue #3...
• 2973eba omit undefined query string parameters instead of sending the string "undefin...
• See full diff in compare view

Updates nodemailer from 10.3.1 to 10.4.0

Release notes

Sourced from nodemailer's releases.

v10.4.0

10.4.0 (2026-11-07)

Summary

The pooled SMTP transport can now be closed with close({ force: true }), which also ends connections that are in the middle of delivering a message. A plain close() behaves as before.

Who should upgrade

No hurry for most users. Upgrade if you use pool: true and need to abandon a delivery that a server is stalling, for example one that trickles its replies so no socket timeout ever fires.

Highlights

• transporter.close({ force: true }) closes busy pooled connections as well as idle ones. The messages they were delivering fail at once with an error instead of being queued again, and messages still waiting in the queue fail as they do on a plain close().
• close() without arguments is unchanged: idle connections close immediately and a connection in the middle of a delivery finishes it first.

Features

• let close({ force: true }) end pooled connections that are delivering a message (aba943c)

Changelog

Sourced from nodemailer's changelog.

10.4.0 (2026-11-07)

Features

• let close({ force: true }) end pooled connections that are delivering a message (aba943c)

Commits

• 3b5cf1e chore(master): release 10.4.0 (#1909)
• aba943c feat: let close({ force: true }) end pooled connections that are delivering a...
• 00d70cf chore(deps): update development dependencies
• f090da2 chore(deps): update development dependencies
• d3aa27e chore(deps): update development dependencies
• See full diff in compare view

Updates supertest from 7.3.1 to 7.3.2

Release notes

Sourced from supertest's releases.

v7.3.2

• fix: keep the shared server alive for every request that uses it 2a5e96f

---

forwardemail/supertest@v7.3.1...v7.3.2

Commits

• aff97e7 7.3.2
• 2a5e96f fix: keep the shared server alive for every request that uses it
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions