Skip to content

chore(deps): bump nette/mail from 4.0.4 to 4.1.1#29

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/nette/mail-4.1.1
Open

chore(deps): bump nette/mail from 4.0.4 to 4.1.1#29
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/composer/nette/mail-4.1.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps nette/mail from 4.0.4 to 4.1.1.

Release notes

Sourced from nette/mail's releases.

Released version 4.1.1

🐛 Bug Fixes

  • Message::setHtmlBody() – survives large inline data: URIs. A >500 kB base64 payload used to exhaust PCRE's backtrack limit and abort the whole send; the regex is now backtracking-free (#79)
  • Message::setHtmlBody() – embeds images whose quoted src="…" or url('…') contains spaces, like "holiday photos/beach.jpg" (#97)
  • Message::setHtmlBody() – embeds images whose quoted path contains parentheses, so the classic screenshot (1).png naming no longer silently breaks (#89)
  • SendmailMailer – signs the full message so DKIM now covers Subject and To headers, closing a deliverability gap at Gmail, Outlook, and other strict providers (#99)
  • MimePart – quotes address phrases containing special characters before MIME-encoding, producing spec-compliant headers even when names include commas, angle brackets, or quotes (#102)
  • CssInliner – gracefully skips selectors the DOM engine can't evaluate; pseudo-classes and pseudo-elements like ::marker, :hover, :checked no longer break inlining
  • CssInliner – tokenizer regex fixed for very long strings and invalid url() quote combinations that previously tripped the parser

Released version 4.1.0

This release introduces CssInliner – a brand-new component that brings CSS-to-inline-style conversion directly into Nette Mail. The minimum PHP version has been raised to 8.2, and static analysis is now a mandatory part of the build pipeline.

  • Minimum PHP version raised from 8.0 to 8.2 – time to upgrade if you haven't already

  • Improved PHPDoc types and descriptions for better IDE support and static analysis accuracy

  • CssInliner – converts <style> rules into inline style attributes, making your HTML emails render consistently across email clients. Features a single-regex tokenizer, full CSS nesting support, Dom\HTMLDocument selector matching (PHP 8.4+), and automatic Outlook-compatible HTML attribute generation (bgcolor, width, align, etc.). <style> tags are preserved so @media queries keep working.

Commits
  • e4b4c6e Message: setHtmlBody() avoids catastrophic backtracking on large data: URIs [...
  • cb5dad8 Message: setHtmlBody() embeds images whose quoted src/url() contains parenthe...
  • 402d5d0 Message: setHtmlBody() embeds images whose quoted src/url() contains spaces [...
  • fdaafe4 SendmailMailer: sign full message so DKIM covers Subject and To [Closes #99]
  • ebf5bd9 MimePart: quote address phrase containing special chars before MIME-encoding ...
  • c56fc2d CssInliner: skip selectors unsupported by the DOM engine (e.g. ::marker, :hover)
  • 727c5d9 CssInliner: fixed tokenizer regex for long strings and invalid url() quotes
  • f5353b9 CssInliner: tokenizer-based CSS parser with DOM inlining
  • e5d058a made static analysis mandatory
  • 968122d fixed PHPStan errors
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [nette/mail](https://github.com/nette/mail) from 4.0.4 to 4.1.1.
- [Release notes](https://github.com/nette/mail/releases)
- [Commits](nette/mail@v4.0.4...v4.1.1)

---
updated-dependencies:
- dependency-name: nette/mail
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Apr 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants