chore(deps): Bump org.simplejavamail:simple-java-mail from 8.12.6 to 9.2.0

[dependabot]

Bumps org.simplejavamail:simple-java-mail from 8.12.6 to 9.2.0.

Release notes

Sourced from org.simplejavamail:simple-java-mail's releases.

v9.2.0

Simple Java Mail 9.2.0 adds refresh-aware OAuth2 credentials and includes security, compatibility, and correctness fixes.

• #692: added refresh-aware OAuth2 access-token providers for long-lived Mailers.
• #691: routed all asynchronous send failures through the returned CompletableFuture.
• #690: made serialized emails preserve send-ready content and fail clearly when pre-9.2 streams lack resource data.
• #689: moved governance opt-outs after email starters and removed the faulty pre-start methods.
• #685: corrected extra Jakarta Mail property precedence to system properties, environment variables, then property files.
• #684: corrected the S/MIME configuration example to use a valid message-content cipher.
• #683: moved CLI-only recipient parsing out of EmailPopulatingBuilder without changing CLI behavior.
• #680: made S/MIME signature status represent only verification that actually occurred and preserve failed combined results.
• #679: rejected DKIM configurations that exclude the mandatory From header.
• 55586ee6: added explicit file: and base64: DKIM private-key sources while preserving unprefixed values.
• #678: contained embedded-image auto-resolution within configured file, classpath, and URL bases.
• #677: replaced trust-all TLS defaults with the JVM trust store while retaining hostname verification.
• #676: bound the authenticated SOCKS bridge to JVM loopback instead of wildcard interfaces.

See the 9.2 migration guide for changes requiring source or configuration updates.

v9.1.8

Simple Java Mail 9.1.8 is a patch release for proxy routing and connection-pool reset behavior.

• MailerBuilder.usingSession(session).withProxy(...) now updates the supported mail.smtp.socks.* route while leaving the rest of the caller's Session configuration untouched (#686).
• SOCKS proxying now works with SMTPS; implicit-TLS certificate and hostname verification remain unchanged (#687).
• resetConnectionPoolMaxSize() now restores only the maximum pool size, without changing the configured core size (#696).
• resetConnectionPoolClaimTimeoutMillis() now restores only the finite default claim timeout (approximately 24.9 days), without changing connection expiry (#697).

Applications that deliberately relied on the old accidental long-expiry behavior can express it directly with withConnectionPoolExpireAfterMillis(Integer.MAX_VALUE).

v9.1.7

Simple Java Mail 9.1.7 fixes recipient selection in the standalone CLI.

• Restores independent --email:to, --email:cc, and --email:bcc options, allowing one command to combine all three recipient types.
• Retains --email:withRecipients for compatible single-recipient-type commands.
• Leaves the public Java builder API unchanged.

Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC this way because repeated --email:withRecipients options are merged into one invalid invocation. CLI users who need multiple recipient types should upgrade to 9.1.7 or later.

See #682.

v9.1.6

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Follow #682 for the 9.1.7 correction.

Simple Java Mail 9.1.6 is a patch release for applications using the Spring module.

• spring-module no longer packages its test application.properties. In versions 9.0.0 through 9.1.5, those sample values could override an application's YAML settings; the local-bind test value 192.0.2.30:25259 could then prevent SMTP connections.
• A packaging guard now prevents root application.* and bootstrap.* configuration files from entering the production artifact.

No public API changed, and Java 8 compatibility is retained. If you use spring-module 9.0.0 through 9.1.5, upgrade to 9.1.6 or later. After upgrading, the withLocalBindAddress("0.0.0.0", 0) workaround is no longer needed.

... (truncated)

Changelog

Sourced from org.simplejavamail:simple-java-mail's changelog.

v9.2.0

• #692: added refresh-aware OAuth2 access-token providers for long-lived Mailers.
• #691: routed all asynchronous send failures through the returned CompletableFuture.
• #690: made serialized emails preserve send-ready content and fail clearly when pre-9.2 streams lack resource data.
• #689: moved governance opt-outs after email starters and removed the faulty pre-start methods.
• #685: corrected extra Jakarta Mail property precedence to system properties, environment variables, then property files.
• #684: corrected the S/MIME configuration example to use a valid message-content cipher.
• #683: moved CLI-only recipient parsing out of EmailPopulatingBuilder without changing CLI behavior.
• #680: made S/MIME signature status represent only verification that actually occurred and preserve failed combined results.
• #679: rejected DKIM configurations that exclude the mandatory From header.
• 55586ee6: added explicit file: and base64: DKIM private-key sources while preserving unprefixed values.
• #678: contained embedded-image auto-resolution within configured file, classpath, and URL bases.
• #677: replaced trust-all TLS defaults with the JVM trust store while retaining hostname verification.
• #676: bound the authenticated SOCKS bridge to JVM loopback instead of wildcard interfaces.

See https://www.simplejavamail.org/migration-notes-9.2.0.html for changes requiring source or configuration updates.

v9.1.0 - v9.1.8

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Upgrade to 9.1.7 or later.

• v9.1.8: #686: Custom-session proxy routing: usingSession(session).withProxy(...) now updates the intended mail.smtp.socks.* route while leaving the rest of the caller's session configuration untouched.
• v9.1.8: #687: SMTPS through SOCKS: removed the obsolete restriction that rejected SOCKS proxying for implicit-TLS SMTP connections.
• v9.1.8: #696, #697: Connection-pool resets: the max-size and claim-timeout reset methods now restore their own settings without changing the core size or connection expiry.
• v9.1.7: #682: Dedicated CLI recipient options: restore independent --email:to, --email:cc, and --email:bcc options so one command can combine all three recipient types.
• v9.1.6: #681: Spring configuration isolation: stop packaging the Spring test application.properties in spring-module. Sample local-bind, SMTP client-hostname, transfer-encoding, and other test values can no longer override an application's YAML configuration or break SMTP connections.
• v9.1.5: #674, #675: SOCKS5 domain framing: place the port after the UTF-8-encoded domain bytes and decode domain replies after their length octet, fixing internationalized-host requests and reply diagnostics.
• v9.1.4: #669, #670: EML file stream ownership: close streams created internally by the File-based EML conversion overloads after synchronous parsing, while leaving caller-provided InputStream ownership unchanged.
• v9.1.4: Java 8-compatible dependency and release-tool maintenance: updated SpotBugs annotations to 4.10.3 (#671), the Central Publishing Maven Plugin to 0.11.0 (#672), and Objenesis to 3.6 (#673).
• v9.1.3: #668: New Outlook inline images: updated outlook-message-parser to 1.16.2 so native-HTML-only .msg files match inline cid: images correctly and trailing NUL terminators no longer leak into attachment metadata.
• v9.1.2: Dependency and Java 8-compatible build-tool maintenance: updated JMail to 2.2.0 (#663), Zip4j to 2.11.6 (#666), Exec Maven Plugin to 3.6.3 (#664), Maven Enforcer Plugin to 3.6.3 (#665), and Maven JAR Plugin to 3.5.1 (#667).
• v9.1.1: Java 8 build-tool maintenance (#662): updated annotations and Maven compiler, JAR, OSGi bundle, and Karaf tooling to Java 8-compatible versions, with Dependabot guards against newer-Java-only upgrade lines.
• v9.1.0: #653: a configurable SMTP client hostname for the EHLO / HELO command.
• v9.1.0: #654: SMTP submission receipts for reading the server acceptance response after a send.
• v9.1.0: No breaking changes; existing sendMail(...) behavior is unchanged.

v9.0.0 - v9.0.4

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

The Short Version

Simple Java Mail has been going strong-ish for about 20 years, and 9.0.0 rolls roughly two years of backlog into a new major release.

simple-java-mail
</tr></table> 

... (truncated)

Commits

• 069cdcc released 9.2.0 [skip ci]
• b216fb2 build(cli): align generated metadata for 9.2.0
• e9a8f78 docs(release): prepare 9.2.0 release notes [skip ci]
• 80c102b Merge branch 'codex/9.2.0' into develop
• 0cb7a2e Merge branch 'codex/api-documentation-audit' into develop
• 5967238 released 9.1.8 [skip ci]
• e4c03c2 build(cli): align generated metadata for 9.1.8
• 1bb4a92 docs(release): prepare 9.1.8 release notes [skip ci]
• 423cb94 fix(mailer): reset connection pool claim timeout
• 85c7697 fix(mailer): reset connection pool max size
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #2722.