chore(deps): Bump org.simplejavamail:simple-java-mail from 8.12.6 to 9.1.7

[dependabot]

Bumps org.simplejavamail:simple-java-mail from 8.12.6 to 9.1.7.

Release notes

Sourced from org.simplejavamail:simple-java-mail's releases.

v9.1.7

Simple Java Mail 9.1.7 fixes recipient selection in the standalone CLI.

• Restores independent --email:to, --email:cc, and --email:bcc options, allowing one command to combine all three recipient types.
• Retains --email:withRecipients for compatible single-recipient-type commands.
• Leaves the public Java builder API unchanged.

Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC this way because repeated --email:withRecipients options are merged into one invalid invocation. CLI users who need multiple recipient types should upgrade to 9.1.7 or later.

See #682.

v9.1.6

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Follow #682 for the 9.1.7 correction.

Simple Java Mail 9.1.6 is a patch release for applications using the Spring module.

• spring-module no longer packages its test application.properties. In versions 9.0.0 through 9.1.5, those sample values could override an application's YAML settings; the local-bind test value 192.0.2.30:25259 could then prevent SMTP connections.
• A packaging guard now prevents root application.* and bootstrap.* configuration files from entering the production artifact.

No public API changed, and Java 8 compatibility is retained. If you use spring-module 9.0.0 through 9.1.5, upgrade to 9.1.6 or later. After upgrading, the withLocalBindAddress("0.0.0.0", 0) workaround is no longer needed.

See #681.

v9.1.5

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Follow #682 for the 9.1.7 correction.

Simple Java Mail 9.1.5 is a patch release fixing SOCKS5 domain framing in authenticated SOCKS support.

• Domain connect requests now place the two-byte port after the UTF-8-encoded hostname bytes, fixing malformed requests for internationalized and other non-ASCII hostnames (#674).
• Domain-form SOCKS5 replies now decode the hostname after its length octet and read the port after the complete hostname, restoring accurate host and port diagnostics (#675).

Compatibility: this release has no public API changes and retains Java 8 compatibility.

v9.1.4

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Follow #682 for the 9.1.7 correction.

Simple Java Mail 9.1.4 fixes file-stream ownership in EML conversion and includes Java 8-compatible dependency and release-tool updates.

Fixes

• EmailConverter.emlToEmailBuilder(File, ...) and EmailConverter.emlToMimeMessage(File, ...) now deterministically close the FileInputStreams they create after synchronous conversion.
• The caller-ownership contract is unchanged: overloads that accept an InputStream continue to leave caller-provided streams open.

Maintenance

• Updated SpotBugs annotations to 4.10.3.

... (truncated)

Changelog

Sourced from org.simplejavamail:simple-java-mail's changelog.

Release History

Full Simple Java Mail release history. The README links to the current release without duplicating these notes.

v9.2.0 - Maven Central

• #692: added refresh-aware OAuth2 access-token providers for long-lived Mailers.
• #691: routed all asynchronous send failures through the returned CompletableFuture.
• #690: made serialized emails preserve send-ready content and fail clearly when pre-9.2 streams lack resource data.
• #689: moved governance opt-outs after email starters and removed the faulty pre-start methods.
• #685: corrected extra Jakarta Mail property precedence to system properties, environment variables, then property files.
• #684: corrected the S/MIME configuration example to use a valid message-content cipher.
• #683: moved CLI-only recipient parsing out of EmailPopulatingBuilder without changing CLI behavior.
• #680: made S/MIME signature status represent only verification that actually occurred and preserve failed combined results.
• #679: rejected DKIM configurations that exclude the mandatory From header.
• 55586ee6: added explicit file: and base64: DKIM private-key sources while preserving unprefixed values.
• #678: contained embedded-image auto-resolution within configured file, classpath, and URL bases.
• #677: replaced trust-all TLS defaults with the JVM trust store while retaining hostname verification.
• #676: bound the authenticated SOCKS bridge to JVM loopback instead of wildcard interfaces.

See the 9.2 migration guide for changes requiring source or configuration updates.

v9.1.0 - v9.1.8 - Maven Central

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Upgrade to 9.1.7 or later.

• v9.1.8: #686: Custom-session proxy routing: usingSession(session).withProxy(...) now updates the intended mail.smtp.socks.* route while leaving the rest of the caller's session configuration untouched.
• v9.1.8: #687: SMTPS through SOCKS: removed the obsolete restriction that rejected SOCKS proxying for implicit-TLS SMTP connections.
• v9.1.8: #696, #697: Connection-pool resets: the max-size and claim-timeout reset methods now restore their own settings without changing the core size or connection expiry.
• v9.1.7: #682: Dedicated CLI recipient options: restore independent --email:to, --email:cc, and --email:bcc options so one command can combine all three recipient types.
• v9.1.6: #681: Spring configuration isolation: stop packaging the Spring test application.properties in spring-module. Sample local-bind, SMTP client-hostname, transfer-encoding, and other test values can no longer override an application's YAML configuration or break SMTP connections.
• v9.1.5: #674, #675: SOCKS5 domain framing: place the port after the UTF-8-encoded domain bytes and decode domain replies after their length octet, fixing internationalized-host requests and reply diagnostics.
• v9.1.4: #669, #670: EML file stream ownership: close streams created internally by the File-based EML conversion overloads after synchronous parsing, while leaving caller-provided InputStream ownership unchanged.
• v9.1.4: Java 8-compatible dependency and release-tool maintenance: updated SpotBugs annotations to 4.10.3 (#671), the Central Publishing Maven Plugin to 0.11.0 (#672), and Objenesis to 3.6 (#673).
• v9.1.3: #668: New Outlook inline images: updated outlook-message-parser to 1.16.2 so native-HTML-only .msg files match inline cid: images correctly and trailing NUL terminators no longer leak into attachment metadata.
• v9.1.2: Dependency and Java 8-compatible build-tool maintenance: updated JMail to 2.2.0 (#663), Zip4j to 2.11.6 (#666), Exec Maven Plugin to 3.6.3 (#664), Maven Enforcer Plugin to 3.6.3 (#665), and Maven JAR Plugin to 3.5.1 (#667).
• v9.1.1: Java 8 build-tool maintenance (#662): updated annotations and Maven compiler, JAR, OSGi bundle, and Karaf tooling to Java 8-compatible versions, with Dependabot guards against newer-Java-only upgrade lines.
• v9.1.0: #653: a configurable SMTP client hostname for the EHLO / HELO command.
• v9.1.0: #654: SMTP submission receipts for reading the server acceptance response after a send.
• v9.1.0: No breaking changes; existing sendMail(...) behavior is unchanged.

v9.0.0 - v9.0.4 - Maven Central

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

The Short Version

... (truncated)

Commits

• 1eb9af0 released 9.1.7 [skip ci]
• 68ccd46 build(cli): align generated metadata for 9.1.7
• 592bdb7 docs(release): prepare 9.1.7 release notes [skip ci]
• 49c8b03 fix(cli): restore dedicated recipient options
• d061151 docs(workflow): keep milestone descriptions empty [skip ci]
• d1dfefa docs(release): warn affected Spring users [skip ci]
• 21b680b released 9.1.6 [skip ci]
• a7fa707 docs(release): prepare 9.1.6 release notes [skip ci]
• 5c0ff45 docs(workflow): retain release authorization [skip ci]
• d5cfd0d docs(release): note Spring config packaging fix [skip ci]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #2715.