Bump github.com/wneessen/go-mail from 0.4.2 to 0.6.2

[dependabot]

Bumps github.com/wneessen/go-mail from 0.4.2 to 0.6.2.

Release notes

Sourced from github.com/wneessen/go-mail's releases.

v0.6.2: Bugfix release

Welcome to go-mail v0.6.2! This release fixes some bugs and makes go-mail ready for Go 1.24.

Fix regression of custom SMTP authentication handling

PR #429 fixes a regression in the handling of custom smtp.Auth methods that was introduced with the v0.6.0 release. Basically, if a custom SMTP auth method was provided, it was simply ignored. Thanks to @​james-d-elliott of the Authelia project for reporting this.

Fix possible nil pointer derefernece in SendWithSMTPClient

With commit wneessen/go-mail@4641da4 we fixed a possible nil pointer dereference in the SendWithSMTPClient method. This would happen if a nil message would be provided to the method. This bug was reported using Github's private vulnerability reporting feature by @​younes199511. Thanks for the report!

Header count logic improvements

PR #421 fixed an issue in the header count logic that is used for S/MIME signing. If a header was broken into mutliple lines due to its lenght, the count logic was giving false results, resulting into false content for the S/MIME signature. Thanks to @​theexiile1305 for reporting the issue and helping to debug the issue!

Go 1.24 readiness

The PRs #431 and #433 make go-mail and its CI ready for Go 1.24.

What's Changed

• Refactor header count logic for accurate line tracking by @​wneessen in wneessen/go-mail#421
• chore: improve tests for multipart messages by @​wneessen in wneessen/go-mail#422
• Add tests for handling nil messages in email client by @​wneessen in wneessen/go-mail#427
• Fix regression of custom smtp.Auth not working by @​wneessen in wneessen/go-mail#429
• Skip tests for broken rand.Reader on Go 1.24+. by @​wneessen in wneessen/go-mail#433
• chore: update CI to Go 1.24 by @​wneessen in wneessen/go-mail#431
• Update version to 0.6.2 and fix typo in documentation by @​wneessen in wneessen/go-mail#434

CI/CD maintenance changes

• Bump golang.org/x/text from 0.21.0 to 0.22.0 by @​dependabot in wneessen/go-mail#425
• Bump golang.org/x/crypto from 0.32.0 to 0.33.0 by @​dependabot in wneessen/go-mail#426

Full Changelog: wneessen/go-mail@v0.6.1...v0.6.2

v0.6.1: Fix for multipart message rendering

Welcome to go-mail v0.6.1! This release is a bug-fix release that addresses a regression introduced in v0.6.0.

[!IMPORTANT]
If you are working with multipart messages and are currently using v0.6.0, it is advised to upgrade to v0.6.1 to avoid rendering issues.

Fix missing new-lines in multipart rendering

The v0.6.0 release introduced a regression in the multipart message generation (See #412). The boundary lines were not correctly seperated with a new line. This bug was introduced while working on the S/MIME handling. The issue has been fixed in #413. I am sorry for any inconveniences this might have caused. Thanks to @​Thomas2500 for reporting the issue!

Multipart boundary handling refactoring

While working on #412, I noticed a general issue with the boundary handling when fixed boundaries are set for the message. This bug was present already since the introduction of Msg.WithBoundary/Msg.SetBoundary, but was only brought to light with the new S/MIME feature introduced in v0.6.0. Since the S/MIME signing needs to set a fixed boundary, it was using the Msg.SetBoundary feature. If more than one multipart parts were used with a fixed boundary, this would render the mail broken (since it was using the same boundary for multiple parts). This has been fixed in #414 and #416. The GoDoc for Msg.WithBoundary/Msg.SetBoundary has also been updated with a warning that using the feature with more than one parts will break the message rendering.

Removal of XOAUTH2 from Auto-Discovery feature

Since XOAUTH2 works with Bearer tokens instead of passwords but the Auto-Discovery SMTP auth feature makes use of a username/password pair having XOAUTH2 in the prefered mechanisms list could cause authentication failures. Therefore the XOAUTH2 mechanism has been removed from the feature completely. Thanks to @​james-d-elliott for pointing this out!

What's Changed

• Fix regression in multipart boundary writing by @​wneessen in wneessen/go-mail#413
• Refactor multipart boundary handling in message rendering by @​wneessen in wneessen/go-mail#416
• Remove XOAUTH2 from Auto-Discovery SMTP auth feature by @​wneessen in wneessen/go-mail#417
• chore: prepare 061 release by @​wneessen in wneessen/go-mail#418

... (truncated)

Commits

• b909433 Merge pull request #434 from wneessen/chore/prepare-062-release
• e745906 Update version to 0.6.2 and fix typo in documentation
• a6c394b Merge pull request #431 from wneessen/chore/430_update-ci-to-go-124
• 251f1eb Merge branch 'main' into chore/430_update-ci-to-go-124
• 870542b Merge pull request #433 from wneessen/bug/432_fix-test-that-are-supposed-to-f...
• 9dbede8 Add SPDX license header to helper_test.go
• a782051 Skip tests for broken rand.Reader on Go 1.24+.
• c9c8a3b Merge pull request #429 from wneessen/bug/428_smtpauthcustom-setsmtpauth-does...
• dea1e9e Update Go version to 1.24 in golangci-lint config
• 8fc6dee Upgrade Go version to 1.24 in CI workflows
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #53.