chore(deps): Bump org.simplejavamail:simple-java-mail from 8.12.6 to 9.3.1

[dependabot]

Bumps org.simplejavamail:simple-java-mail from 8.12.6 to 9.3.1.

Release notes

Sourced from org.simplejavamail:simple-java-mail's releases.

v9.3.1

Simple Java Mail 9.3.1 is a Java 8-compatible build-tool maintenance release.

Changes

• Updated Maven Antrun Plugin from 3.1.0 to 3.2.0 for the JPMS consumer-compilation check.
• Updated Maven Dependency Plugin from 3.8.1 to 3.11.0 for construction of the JPMS module path.

These changes affect project build tooling only. This release contains no runtime-dependency changes, public API changes, or intended mail-sending behavior changes. Java 8 remains the minimum supported runtime.

The maintenance pull requests are #700 and #701.

v9.3.0

Simple Java Mail 9.3.0 exposes batch-module as a supported standalone Jakarta Mail orchestration API.

• #698 adds BatchTransportExecutor<K> for applications that create their own Session and MimeMessage objects without adopting EmailBuilder or Mailer. The main simple-java-mail facade is not required.
• Register Sessions by cluster key, then run cluster-selected or exact-Session callbacks synchronously or submit them as CompletableFuture work. Each callback receives the actually selected Session and connected Transport.
• The facade keeps raw leases private, releases connections after successful callbacks, invalidates them after escaping failures, resolves OAuth2 credentials from the selected Session, and provides deterministic graceful or forced shutdown. Its default executor is module-owned; an injected executor remains caller-owned.
• The existing pooled Mailer path and the standalone facade now share one transport engine. smtp-connection-pool remains the only physical pool owner; do not stack batch/direct orchestration over the Jakarta smtppool provider.
• The supporting chain is updated to smtp-connection-pool 4.0.1, clustered-object-pool 4.0.3, and generic-object-pool 2.4.2. The published JPMS names are org.simplejavamail.batch, org.simplejavamail.smtpconnectionpool, org.bbottema.clusteredobjectpool, and org.bbottema.genericobjectpool.

See the SMTP connection pooling and batch orchestration guide for the comparison matrix, ownership rules, and complete examples.

v9.2.0

Simple Java Mail 9.2.0 adds refresh-aware OAuth2 credentials and includes security, compatibility, and correctness fixes.

• #692: added refresh-aware OAuth2 access-token providers for long-lived Mailers.
• #691: routed all asynchronous send failures through the returned CompletableFuture.
• #690: made serialized emails preserve send-ready content and fail clearly when pre-9.2 streams lack resource data.
• #689: moved governance opt-outs after email starters and removed the faulty pre-start methods.
• #685: corrected extra Jakarta Mail property precedence to system properties, environment variables, then property files.
• #684: corrected the S/MIME configuration example to use a valid message-content cipher.
• #683: moved CLI-only recipient parsing out of EmailPopulatingBuilder without changing CLI behavior.
• #680: made S/MIME signature status represent only verification that actually occurred and preserve failed combined results.
• #679: rejected DKIM configurations that exclude the mandatory From header.
• 55586ee6: added explicit file: and base64: DKIM private-key sources while preserving unprefixed values.
• #678: contained embedded-image auto-resolution within configured file, classpath, and URL bases.
• #677: replaced trust-all TLS defaults with the JVM trust store while retaining hostname verification.
• #676: bound the authenticated SOCKS bridge to JVM loopback instead of wildcard interfaces.

See the 9.2 migration guide for changes requiring source or configuration updates.

v9.1.8

Simple Java Mail 9.1.8 is a patch release for proxy routing and connection-pool reset behavior.

• MailerBuilder.usingSession(session).withProxy(...) now updates the supported mail.smtp.socks.* route while leaving the rest of the caller's Session configuration untouched (#686).
• SOCKS proxying now works with SMTPS; implicit-TLS certificate and hostname verification remain unchanged (#687).
• resetConnectionPoolMaxSize() now restores only the maximum pool size, without changing the configured core size (#696).
• resetConnectionPoolClaimTimeoutMillis() now restores only the finite default claim timeout (approximately 24.9 days), without changing connection expiry (#697).

... (truncated)

Changelog

Sourced from org.simplejavamail:simple-java-mail's changelog.

v9.3.0 - v9.3.1 - v9.3.2 - Maven Central

• v9.3.2: #702: Recipient address clarity: renamed the misleading oneOrMoreAddresses implementation parameter and validation label to address; RecipientBuilder builds one recipient, while RecipientsBuilder accepts comma- or semicolon-delimited address lists.
• v9.3.1: Java 8-compatible JPMS build-tool maintenance: updated Maven Antrun Plugin from 3.1.0 to 3.2.0 (#700) and Maven Dependency Plugin from 3.8.1 to 3.11.0 (#701).
• v9.3.0: #698: Standalone batch-module API: added BatchTransportExecutor for applications that build their own Jakarta Mail messages but want clustered or exact-Session callbacks, futures, automatic connection release/invalidation, and deterministic lifecycle management.

Supporting Libraries

• v9.3.0 — smtp-connection-pool 4.0.1: adopted the explicit SmtpTransportLease contract used by both the standalone facade and the existing Simple Java Mail Mailer integration. The complete generic, clustered, SMTP, and batch dependency chain now publishes stable JPMS automatic module names. The Jakarta smtppool provider remains a parallel choice and must not be nested beneath the batch-owned pool.

v9.2.0 - Maven Central

• #692: added refresh-aware OAuth2 access-token providers for long-lived Mailers.
• #691: routed all asynchronous send failures through the returned CompletableFuture.
• #690: made serialized emails preserve send-ready content and fail clearly when pre-9.2 streams lack resource data.
• #689: moved governance opt-outs after email starters and removed the faulty pre-start methods.
• #685: corrected extra Jakarta Mail property precedence to system properties, environment variables, then property files.
• #684: corrected the S/MIME configuration example to use a valid message-content cipher.
• #683: moved CLI-only recipient parsing out of EmailPopulatingBuilder without changing CLI behavior.
• #680: made S/MIME signature status represent only verification that actually occurred and preserve failed combined results.
• #679: rejected DKIM configurations that exclude the mandatory From header.
• 55586ee6: added explicit file: and base64: DKIM private-key sources while preserving unprefixed values.
• #678: contained embedded-image auto-resolution within configured file, classpath, and URL bases.
• #677: replaced trust-all TLS defaults with the JVM trust store while retaining hostname verification.
• #676: bound the authenticated SOCKS bridge to JVM loopback instead of wildcard interfaces.

See the 9.2 migration guide for changes requiring source or configuration updates.

v9.1.0 - v9.1.8 - Maven Central

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Upgrade to 9.1.7 or later.

• v9.1.8: #686: Custom-session proxy routing: usingSession(session).withProxy(...) now updates the intended mail.smtp.socks.* route while leaving the rest of the caller's session configuration untouched.
• v9.1.8: #687: SMTPS through SOCKS: removed the obsolete restriction that rejected SOCKS proxying for implicit-TLS SMTP connections.
• v9.1.8: #696, #697: Connection-pool resets: the max-size and claim-timeout reset methods now restore their own settings without changing the core size or connection expiry.
• v9.1.7: #682: Dedicated CLI recipient options: restore independent --email:to, --email:cc, and --email:bcc options so one command can combine all three recipient types.
• v9.1.6: #681: Spring configuration isolation: stop packaging the Spring test application.properties in spring-module. Sample local-bind, SMTP client-hostname, transfer-encoding, and other test values can no longer override an application's YAML configuration or break SMTP connections.
• v9.1.5: #674, #675: SOCKS5 domain framing: place the port after the UTF-8-encoded domain bytes and decode domain replies after their length octet, fixing internationalized-host requests and reply diagnostics.
• v9.1.4: #669, #670: EML file stream ownership: close streams created internally by the File-based EML conversion overloads after synchronous parsing, while leaving caller-provided InputStream ownership unchanged.
• v9.1.4: Java 8-compatible dependency and release-tool maintenance: updated SpotBugs annotations to 4.10.3 (#671), the Central Publishing Maven Plugin to 0.11.0 (#672), and Objenesis to 3.6 (#673).
• v9.1.3: #668: New Outlook inline images: updated outlook-message-parser to 1.16.2 so native-HTML-only .msg files match inline cid: images correctly and trailing NUL terminators no longer leak into attachment metadata.
• v9.1.2: Dependency and Java 8-compatible build-tool maintenance: updated JMail to 2.2.0 (#663), Zip4j to 2.11.6 (#666), Exec Maven Plugin to 3.6.3 (#664), Maven Enforcer Plugin to 3.6.3 (#665), and Maven JAR Plugin to 3.5.1 (#667).
• v9.1.1: Java 8 build-tool maintenance (#662): updated annotations and Maven compiler, JAR, OSGi bundle, and Karaf tooling to Java 8-compatible versions, with Dependabot guards against newer-Java-only upgrade lines.
• v9.1.0: #653: a configurable SMTP client hostname for the EHLO / HELO command.
• v9.1.0: #654: SMTP submission receipts for reading the server acceptance response after a send.
• v9.1.0: No breaking changes; existing sendMail(...) behavior is unchanged.

... (truncated)

Commits

• e44c4c9 released 9.3.1 [skip ci]
• 461e5f7 docs(release): prepare 9.3.1 release notes
• 68728f3 build(deps-dev): bump org.apache.maven.plugins:maven-dependency-plugin (#701)
• d491c33 build(deps-dev): bump org.apache.maven.plugins:maven-antrun-plugin (#700)
• b3111e2 docs(website): publish pooling guidance update [skip ci]
• cb3a9a1 docs(website): publish pooling guide follow-up [skip ci]
• 29f25e8 released 9.3.0 [skip ci]
• b9c0cb8 feat(batch): expose standalone transport orchestration
• 92549b2 merge(release): reconcile master with develop [skip ci]
• b499d76 docs(readme): rebuild developer landing page [skip ci]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #2726.