Update npm package @types/nodemailer to v6.4.20
#7729
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![hash-worker[bot]](https://avatars.githubusercontent.com/in/991899?s=60&v=4){kind=small}
hashdotai
previously approved these changes
Aug 16, 2025
github-actions
bot
added
area/deps
hash-worker
bot
force-pushed
the
deps/js/nodemailer-6.x
branch
from
1062acb to
1314418
Compare
hash-worker
bot
changed the title
@types/nodemailer to v6.4.18@types/nodemailer to v6.4.19
hashdotai
previously approved these changes
Aug 23, 2025
hash-worker
bot
force-pushed
the
deps/js/nodemailer-6.x
branch
from
1314418 to
4ca269b
Compare
hashdotai
previously approved these changes
Sep 1, 2025
hash-worker
bot
force-pushed
the
deps/js/nodemailer-6.x
branch
from
4ca269b to
fdddf70
Compare
hashdotai
previously approved these changes
Sep 20, 2025
hash-worker
bot
force-pushed
the
deps/js/nodemailer-6.x
branch
from
fdddf70 to
6ebae91
Compare
hash-worker
bot
changed the title
@types/nodemailer to v6.4.19@types/nodemailer to v6.4.20
hashdotai
approved these changes
Oct 2, 2025
![vercel[bot]](https://avatars.githubusercontent.com/in/8329?s=60&v=4){kind=small}
| "@types/md5": "2.3.5", | ||
| "@types/mime-types": "2.1.4", | ||
| "@types/nodemailer": "6.4.17", | ||
| "@types/nodemailer": "6.4.20", |
There was a problem hiding this comment.
The pinned version 3.858.0 of @aws-sdk/client-ses conflicts with the newer version (3.901.0) required by the updated @types/[email protected], creating potential type mismatches and duplicate dependencies.
View Details
📝 Patch Details
diff --git a/apps/hash-api/package.json b/apps/hash-api/package.json
index b48c3c3b0..e3bc7eaa3 100644
--- a/apps/hash-api/package.json
+++ b/apps/hash-api/package.json
@@ -25,7 +25,7 @@
"dependencies": {
"@apps/hash-graph": "0.0.0-private",
"@aws-sdk/client-s3": "3.858.0",
- "@aws-sdk/client-ses": "3.858.0",
+ "@aws-sdk/client-ses": "^3.858.0",
"@aws-sdk/credential-provider-node": "3.858.0",
"@aws-sdk/s3-presigned-post": "3.858.0",
"@aws-sdk/s3-request-presigner": "3.858.0",
Analysis
Duplicate AWS SDK versions causing type mismatches and increased bundle size
What fails: Two versions of @aws-sdk/client-ses are installed: 3.858.0 (pinned) and 3.901.0 (from @types/[email protected]), causing TypeScript to potentially use different type definitions than runtime code in apps/hash-api/src/email/transporters/aws-ses-email-transporter.ts
How to reproduce:
# Check yarn.lock for duplicate entries:
grep -A2 '"@aws-sdk/client-ses@' yarn.lock
# Shows both 3.858.0 and 3.901.0 installed
# Verify @types/nodemailer dependency:
npm view @types/[email protected] dependencies
# Returns: { '@types/node': '*', '@aws-sdk/client-ses': '^3.731.1' }Result: Yarn installs both versions in the lockfile, increasing bundle size and creating potential for runtime/type inconsistencies where TypeScript may resolve to 3.901.0 types while runtime uses the 3.858.0 implementation
Expected: Single consistent version of @aws-sdk/client-ses used across all dependencies per npm deduplication best practices
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.4.17->6.4.20Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Configuration
📅 Schedule: Branch creation - "before 4am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.