Bump nodemailer from 9.0.3 to 9.0.4 in the default group

[dependabot]

Bumps the default group with 1 update: nodemailer.

Updates nodemailer from 9.0.3 to 9.0.4

Release notes

Sourced from nodemailer's releases.

v9.0.4

9.0.4 (2026-08-04)

Bug Fixes

• mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
• mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
• mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
• mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
• mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)

Changelog

Sourced from nodemailer's changelog.

9.0.4 (2026-08-04)

Bug Fixes

• mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
• mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
• mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
• mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
• mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)

Commits

• 2a0e8c3 chore(master): release 9.0.4 (#1841)
• 78f4aa2 fix(mime-funcs): percent encode unpaired surrogates in header parameter values
• 182d39a refactor(mime-node): quote the Content-Type name parameter with JSON.stringify
• 9797f7f fix(mime-funcs): do not let an unpaired surrogate consume the next character
• adcfc4f fix(mime-node): escape backslash and quote in the Content-Type name parameter...
• 5bd3a65 fix(mime-funcs): keep any surrogate pair intact when chunking base64 mime wor...
• eaf12a0 chore(services): add TurboSMTP (#1839)
• b27d300 test(mime-node): assert the Content-Type name= output for line break filenames
• 5bc9cab fix(mime): encode HT/CR/LF in header parameter values instead of quoting them...
• acc2b43 chore(deps): update dev dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions