[dependabot]

Bumps the npm_and_yarn group with 2 updates in the / directory: nodemailer and electron.
Bumps the npm_and_yarn group with 1 update in the /src/longtail/addon directory: ip-address.

Updates nodemailer from 10.0.9 to 10.0.10

Release notes

Sourced from nodemailer's releases.

v10.0.10

10.0.10 (2026-09-14)

Bug Fixes

• derive the attachment filename from the basename of a Windows path (c7cc7ce)
• dkim: unfold folded header lines in linear time (28a5909)
• smtp-connection: reassemble multiline replies in linear time (f2d82fa)

Changelog

Sourced from nodemailer's changelog.

10.0.10 (2026-09-14)

Bug Fixes

• derive the attachment filename from the basename of a Windows path (c7cc7ce)
• dkim: unfold folded header lines in linear time (28a5909)
• smtp-connection: reassemble multiline replies in linear time (f2d82fa)

Commits

• a67b182 chore(master): release 10.0.10 (#1873)
• f2d82fa fix(smtp-connection): reassemble multiline replies in linear time
• 28a5909 fix(dkim): unfold folded header lines in linear time
• c7cc7ce fix: derive the attachment filename from the basename of a Windows path
• See full diff in compare view

Updates electron from 44.3.0 to 44.5.0

Release notes

Sourced from electron's releases.

electron v44.5.0

Release Notes for v44.5.0

Features

• Added launch-failure reporting with systemErrorCode to the app child-process-gone event. #54231 (Also in 45)

Fixes

• Changed the default trash implementation on KDE Plasma 6 to kioclient. #54361 (Also in 45)
• DevTools zoom in/out now uses the same zoom steps as Chromium. #54387 (Also in 45)
• Fixed --xdg-portal-required-version having no effect and a spurious portal warning being logged for file dialogs on Linux. #54303 (Also in 43, 45)
• Fixed a child WebContentsView losing focus when its window is reactivated. #54455 (Also in 43, 45)
• Fixed a crash when a WebAuthn request used a security key that required its PIN. #54403 (Also in 45)
• Fixed a crash when creating a framed window on Wayland in environments where GTK could not initialize. #54420 (Also in 45)
• Fixed a crash when sending a DevTools protocol command with a non-string value for an optional string parameter via webContents.debugger. #54445 (Also in 43, 45)
• Fixed a GPU process crash on startup when another instance of the app is using the same session data directory. #54469
• Fixed a grey border around frameless windows on Linux WMs without compositing. #54391 (Also in 43, 45)
• Fixed a main process crash when a native API method was called with a this value of a different native type; it now throws a TypeError. #54315 (Also in 43)
• Fixed a possible crash during process exit when vm.Script or vm contexts created in the main process had been garbage collected shortly before quitting. #54266 (Also in 43, 45)
• Fixed a possible crash on Windows on ARM when powerMonitor is torn down. #54408 (Also in 45)
• Fixed a renderer crash calling image.toPNG() from a sandboxed preload script. #54502 (Also in 43, 45)
• Fixed a renderer crash when a ResizeObserver loop-limit error handler modified layout. #54290 (Also in 45)
• Fixed accent-color-changed on Windows reporting a colour that differed from systemPreferences.getAccentColor(). #54409 (Also in 45)
• Fixed an issue where crashReporter.setUploadToServer() had no effect after crashReporter.start() was called. #54518 (Also in 45)
• Fixed app.getRecentDocuments() omitting documents with non-ASCII paths on Windows. #54407 (Also in 45)
• Fixed clipboard.read(), readText() and has() resolving seconds late on Linux while the app was idle. #54308 (Also in 42, 43, 45)
• Fixed desktopCapturer.getSources() leaving non-resizable windows resizable on macOS. #54397 (Also in 43, 45)
• Fixed fs.rmSync failing to remove read-only files on Windows. #54255 (Also in 42, 43, 45)
• Fixed GDK_BACKEND leaking into processes spawned by Electron apps on Linux. #54425 (Also in 43, 45)
• Fixed hidden windows continuing to render at full frame rate after setBackgroundThrottling(false) followed by setBackgroundThrottling(true). #54341 (Also in 45)
• Fixed pointerLock permission requests from some iframes reporting the parent frame. #54464 (Also in 42, 43, 45)
• Fixed setContentProtection(true) having no effect in Windows remote sessions. #54500 (Also in 45)
• Fixed setIgnoreMouseEvents() taking effect late on X11. #54497 (Also in 43, 45)
• Fixed setIgnoreMouseEvents(true) being undone by the next resize on X11. #54393 (Also in 43, 45)
  • Added setIgnoreMouseEvents support on Wayland.
• Fixed shell.showItemInFolder() on Linux for paths containing #, ? or % when the file manager is reached over D-Bus. #54406 (Also in 45)
• Fixed the default action label on Linux notifications not being localized. #54401 (Also in 43, 45)
• Fixed the GPU process crash-looping on Windows when the sandbox cannot read the install folder; the folder is now reported instead. #54484 (Also in 43, 45)
• Fixed the zoom level resetting on file: and other host-less pages after a location.hash change. #54442 (Also in 43, 45)
• Fixed typing not working after closing an alert() or confirm() on Windows. #54461 (Also in 43, 45)
• Fixed utilityProcess dropping stdout/stderr output that the child wrote immediately before exiting. #54278 (Also in 42, 43, 45)
• Fixed visual zoom limits resetting on navigation and not applying to webviews. #54449 (Also in 43, 45)
• Fixed WebAssembly modules loaded from the code cache crashing or throwing RuntimeError: unreachable after updating between certain patch releases. #54246 (Also in 42, 43, 45)
• Fixed win.setEnabled(false) and modal child windows not blocking input on Wayland. #54447 (Also in 43, 45)
• Fixed zoom in/out getting stuck after zooming past the 25%-500% range. #54421 (Also in 43, 45)
  • Fixed setVisualZoomLevelLimits() shrinking pages when the minimum is under 1.

Performance Improvements

... (truncated)

Commits

• 435b189 test: parse all custom page size PDFs in one pdf.js process (#54544)
• a2db7a8 test: wait for child output before asserting on it (#54541)
• fa180db fix: crashReporter.setUploadToServer() having no effect after start (#54518)
• 60f40fe test: wait for focus before requesting pointer lock in spec (#54533)
• f0a852d test: wait for earlier Electron workers to exit before serial specs (#54512)
• 42ed175 fix: apply the X11 input shape before setIgnoreMouseEvents() returns (#54497)
• 71490d8 fix: apply setContentProtection() in Windows remote sessions again (#54500)
• d4bd178 fix: throw instead of crashing when nativeImage cannot create a Buffer (#54502)
• 614efcd fix: report install folders that the sandbox cannot read on Windows instead o...
• 4fbf659 test: fix chrome.tabs reload spec race with the reload commit (#54475)
• Additional commits viewable in compare view

Updates ip-address from 10.7.3 to 10.7.4

Release notes

Sourced from ip-address's releases.

v10.7.4

Full Changelog: beaugunderson/ip-address@v10.7.3...v10.7.4

Commits

• 651c1dd 10.7.4
• ec80fcd Find an IPv6 zone by index so a rejected zone costs one pass
• e22eb4a Check generated docs without writing or hiding partial staging
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.