Skip to content

Update dependency org.simplejavamail:simple-java-mail to v9.2.0 - #82

Open
xdev-renovate wants to merge 1 commit into
developfrom
renovate/org.simplejavamail-simple-java-mail-9.x
Open

Update dependency org.simplejavamail:simple-java-mail to v9.2.0#82
xdev-renovate wants to merge 1 commit into
developfrom
renovate/org.simplejavamail-simple-java-mail-9.x

Conversation

@xdev-renovate

@xdev-renovate xdev-renovate commented Aug 7, 2026

Copy link
Copy Markdown
Member

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
org.simplejavamail:simple-java-mail (source) test minor 9.1.59.2.0

Release Notes

bbottema/simple-java-mail (org.simplejavamail:simple-java-mail)

v9.2.0

Compare Source

  • #​692: added refresh-aware OAuth2 access-token providers for long-lived Mailers.
  • #​691: routed all asynchronous send failures through the returned CompletableFuture.
  • #​690: made serialized emails preserve send-ready content and fail clearly when pre-9.2 streams lack resource data.
  • #​689: moved governance opt-outs after email starters and removed the faulty pre-start methods.
  • #​685: corrected extra Jakarta Mail property precedence to system properties, environment variables, then property files.
  • #​684: corrected the S/MIME configuration example to use a valid message-content cipher.
  • #​683: moved CLI-only recipient parsing out of EmailPopulatingBuilder without changing CLI behavior.
  • #​680: made S/MIME signature status represent only verification that actually occurred and preserve failed combined results.
  • #​679: rejected DKIM configurations that exclude the mandatory From header.
  • 55586ee6: added explicit file: and base64: DKIM private-key sources while preserving unprefixed values.
  • #​678: contained embedded-image auto-resolution within configured file, classpath, and URL bases.
  • #​677: replaced trust-all TLS defaults with the JVM trust store while retaining hostname verification.
  • #​676: bound the authenticated SOCKS bridge to JVM loopback instead of wildcard interfaces.

See the 9.2 migration guide for changes requiring source or configuration updates.

v9.1.0 - v9.1.8 - Maven Central

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

CLI recipient notice: Versions 9.0.0 through 9.1.6 cannot combine TO, CC, and BCC recipients in one CLI command. Repeated --email:withRecipients options are merged and rejected. Upgrade to 9.1.7 or later.

  • v9.1.8: #​686: Custom-session proxy routing: usingSession(session).withProxy(...) now updates the intended mail.smtp.socks.* route while leaving the rest of the caller's session configuration untouched.
  • v9.1.8: #​687: SMTPS through SOCKS: removed the obsolete restriction that rejected SOCKS proxying for implicit-TLS SMTP connections.
  • v9.1.8: #​696, #​697: Connection-pool resets: the max-size and claim-timeout reset methods now restore their own settings without changing the core size or connection expiry.
  • v9.1.7: #​682: Dedicated CLI recipient options: restore independent --email:to, --email:cc, and --email:bcc options so one command can combine all three recipient types.
  • v9.1.6: #​681: Spring configuration isolation: stop packaging the Spring test application.properties in spring-module. Sample local-bind, SMTP client-hostname, transfer-encoding, and other test values can no longer override an application's YAML configuration or break SMTP connections.
  • v9.1.5: #​674, #​675: SOCKS5 domain framing: place the port after the UTF-8-encoded domain bytes and decode domain replies after their length octet, fixing internationalized-host requests and reply diagnostics.
  • v9.1.4: #​669, #​670: EML file stream ownership: close streams created internally by the File-based EML conversion overloads after synchronous parsing, while leaving caller-provided InputStream ownership unchanged.
  • v9.1.4: Java 8-compatible dependency and release-tool maintenance: updated SpotBugs annotations to 4.10.3 (#​671), the Central Publishing Maven Plugin to 0.11.0 (#​672), and Objenesis to 3.6 (#​673).
  • v9.1.3: #​668: New Outlook inline images: updated outlook-message-parser to 1.16.2 so native-HTML-only .msg files match inline cid: images correctly and trailing NUL terminators no longer leak into attachment metadata.
  • v9.1.2: Dependency and Java 8-compatible build-tool maintenance: updated JMail to 2.2.0 (#​663), Zip4j to 2.11.6 (#​666), Exec Maven Plugin to 3.6.3 (#​664), Maven Enforcer Plugin to 3.6.3 (#​665), and Maven JAR Plugin to 3.5.1 (#​667).
  • v9.1.1: Java 8 build-tool maintenance (#​662): updated annotations and Maven compiler, JAR, OSGi bundle, and Karaf tooling to Java 8-compatible versions, with Dependabot guards against newer-Java-only upgrade lines.
  • v9.1.0: #​653: a configurable SMTP client hostname for the EHLO / HELO command.
  • v9.1.0: #​654: SMTP submission receipts for reading the server acceptance response after a send.
  • v9.1.0: No breaking changes; existing sendMail(...) behavior is unchanged.

v9.0.0 - v9.0.4 - Maven Central

Spring-module notice: Versions 9.0.0 through 9.1.5 package test application settings that can override an application's YAML configuration and prevent SMTP connections. If you use spring-module, upgrade to 9.1.6 or later.

The Short Version

Simple Java Mail has been going strong-ish for about 20 years, and 9.0.0 rolls roughly two years of backlog into a new major release.

simple-java-mail
└── outlook-message-parser
    └── rtf-to-html
└── java-utils-mail-dkim
└── java-utils-mail-smime
└── smtp-connection-pool
    └── clustered-object-pool
        └── generic-object-pool
└── java-socks-proxy-server

Across Simple Java Mail and the supporting libraries that keep the stack moving, more than 100 GitHub issues and PRs were reviewed, fixed, merged, or closed while keeping the project Java 8-compatible.

Major features: the dedicated recipient builder API, per-recipient S/MIME certificates, first-class Delivery Status Notification support, pre-encoded attachment and embedded-image sending, mailer-level DKIM defaults, and simple batch/open-connection sending without the batch module.
Enhancements: broader Outlook conversion metadata, MIME resource handling, content-transfer encoding control, debug routing, local SMTP bind configuration, batch cluster configuration, and Java module support.

Migration Note

This is a breaking major release. The old recipient-addition method jungle has been cleaned up in favor of the recipient builder API, so code that relied on the removed recipient overloads needs to migrate. Start with the 9.0 migration notes before upgrading.

Major Features
  • v9.0.0: #​613: Recipient builder API: added dedicated builders for constructing single recipients and recipient collections.
  • v9.0.0: #​297: Per-recipient S/MIME certificates: enabled encrypted mail for multiple recipients with different certificates.
  • v9.0.0: #​574: Delivery Status Notification (DSN): added first-class DSN configuration.
  • v9.0.0: #​573: Pre-encoded resources: added pre-encoded attachment and embedded-image APIs.
  • v9.0.0: #​196: Mailer-level DKIM defaults: added default DKIM signing configuration so DKIM can be configured once per Mailer.
  • v9.0.0: #​569: Simple batch and open-connection sending: added sendMailsInSimpleBatch(...) for sequential batch work without the batch module and withOpenConnection(...) for callback-scoped reuse of a single SMTP connection.
Enhancements
  • v9.0.2: #​645: Outlook last-modifier metadata: exposed PR_LAST_MODIFIER_NAME / 0x3FFA as OutlookMessageData#getLastModifierName() without treating it as sender identity.
  • v9.0.0: #​614: Outlook conversion metadata: added explicit result APIs for inspecting source .msg headers and metadata without copying structural headers into converted emails, resolving #​609.
  • v9.0.0: #​605: Per-body content-transfer encoding: added Content-Transfer-Encoding configuration for plain text, HTML, and calendar content.
  • v9.0.0: #​566, #​597, #​602, #​607: MIME resource Content-ID handling: improved explicit IDs, parsed embedded images, and generated fallback IDs.
  • v9.0.0: #​589: Jakarta Mail debug output: added configurable debug output routing.
  • v9.0.0: #​568: Local SMTP bind address: added configuration for multi-IP SMTP hosts.
  • v9.0.0: #​565, #​618: Batch cluster configuration: fixed Java API cluster configuration and added property-defined cluster configurations for property-file and Spring-configured clustered sending.
  • v9.0.0: #​572, #​571: S/MIME conversion leniency: tolerate unsupported S/MIME payloads during Outlook conversion and preserve parsed email content when signature verification fails.
  • v9.0.0: #​606: MIME type sanitizing: sanitize malformed resource MIME types before generating attachment and embedded-image headers.
  • v9.0.0: #​541: Resource headers: removed the non-standard filename parameter from resource Content-Type headers; filenames remain available through Content-Disposition.
  • v9.0.0: #​265, #​237: Java module support: added Java 9 module descriptors to the core and facade jars so modular applications can require org.simplejavamail directly.
Fixes and Compatibility
  • v9.0.4: #​652: RFC 2047 address validation: reject encoded-word syntax inside address specs during validation while keeping encoded display names valid.
  • v9.0.3: #​651: Outlook plain-text RTF rendering: preserved line breaks without exposing browser-default <pre> styling in converted HTML.
  • v9.0.0: #​615: Async test connections: fixed MailerGenericBuilder.async() so no-arg testConnection() uses the configured async default.
  • v9.0.0: #​611: SMTPS custom SSL socket factories: fixed custom SSL socket factory configuration for SMTPS mailers.
  • v9.0.0: #​535: Async failure reporting: let async send and connection-test failures surface through the returned CompletableFuture without duplicate framework error logs.
  • v9.0.0: #​583: Java 25 CLI startup: fixed CLI startup on Java 25.
  • v9.0.0: #​616: CLI optional-argument detection: removed the runtime JetBrains annotation fork from CLI optional-argument detection.
  • v9.0.0: Standalone CLI command cleanup: send, connect, and validate now wait for command work and close mailer resources, preventing batch-module resources from keeping the process alive.
Dependency and Supporting-Library Updates
  • v9.0.3: Angus runtime alignment: bumped Angus Mail to 2.0.5 and added Angus Activation 2.0.3.
  • v9.0.3: Logging dependencies: bumped Log4j from 2.25.4 to 2.26.1.
  • v9.0.2: Jakarta API alignment: bumped Jakarta Mail API to 2.1.5 and Jakarta Activation API to 2.1.4.
  • v9.0.0: Core dependency maintenance: bumped JMail to 2.1.0 (#​634), commons-io to 2.22.0 (#​579, #​627), Kryo to 5.6.2 (#​586), Zip4j to 2.11.5 (#​587), SubEthaSMTP to 7.2.2 (#​593, #​632), Angus Mail to 2.0.4 (#​604), Objenesis to 3.5 (#​580, #​635), Lombok to 1.18.46 (#​636), AssertJ Core to 3.27.7 (#​622), and SpotBugs annotations to 4.10.2 (#​629).
  • v9.0.0: Logging dependencies: aligned Log4j to 2.25.4 (#​624) and SLF4J API to 2.0.18 (#​631), keeping the Log4j bridge on log4j-slf4j2-impl for SLF4J 2.x.
Supporting Libraries
  • v9.0.3: outlook-message-parser 1.16.1 / rtf-to-html 2.0.2: fixed browser-default <pre> styling in Outlook plain-text RTF conversion (#​651).
  • v9.0.2: outlook-message-parser 1.16.0: added source last-modifier metadata used by OutlookMessageData#getLastModifierName().
  • v9.0.0: utils-mail-dkim 3.3.0: added configurable DNS provider URL support for DKIM domain-key TXT lookups, fixed the published automatic module name, and kept packaged artifacts free of JaCoCo probes.
  • v9.0.0: clustered-object-pool 4.0.1 (#​6): added cluster-specific Java configuration for pool defaults, claim timeout, and load balancing.
  • v9.0.0: smtp-connection-pool 3.0.1 (#​8): pulled in clustered-object-pool 4.0.1 so the batch-module fix for #​565 can keep connection-pool defaults per cluster key.
  • v9.0.0: smtp-connection-pool 3.0.0: made clustered SMTP pools generic over their cluster-key type and kept already-unusable connections from surfacing as generic pool error logs during transport close.
  • v9.0.0: java-socks-proxy-server 4.2.0: updated SOCKS live tests to use dynamic proxy ports instead of fixed ports.
  • v9.0.0: outlook-message-parser 1.15.0: improved Outlook .msg conversion by preserving nested message attachment metadata, fixing sent-date extraction (#​534), fixing recipient bucket parsing (#​504), broadening S/MIME detection, improving RTF-only body conversion (#​576), and updating Apache POI.
Build and Test Maintenance
  • v9.0.3: Build maintenance: bumped Maven Source Plugin to 3.4.0, NotNull Instrumenter Maven Plugin to 1.1.1, and Mycila License Maven Plugin to 4.6.
  • v9.0.2: Build maintenance: bumped Maven Assembly Plugin to 3.8.0 and Nexus Staging Maven Plugin to 1.7.0, and extended Dependabot guards for Java 11-only plugin lines.
  • v9.0.1: Release packaging: restored generated license headers in published source JARs and enabled publication of the standalone CLI ZIP and TAR classifier artifacts.
  • v9.0.0: Build plugins and test stack: bumped Maven Surefire Plugin to 3.5.6 (#​592, #​625), Maven Clean Plugin to 3.5.0 (#​626), Appassembler Maven Plugin to 2.1.0 (#​581), Exec Maven Plugin to 3.5.0 (#​582), Maven Deploy Plugin to 3.1.4 (#​619), Maven Install Plugin to 3.1.4 (#​639), Maven Javadoc Plugin to 3.12.0 (#​637), Maven GPG Plugin to 3.2.8 (#​621), and JaCoCo Maven Plugin to 0.8.15 (#​638); aligned JUnit Platform/Jupiter at 1.14.4/5.14.4 while preserving Java 8 compatibility (#​596, #​633); kept JUnit Pioneer on 1.9.1 because 2.x is Java 11 bytecode (#​630); added Java 8 Dependabot guards; and replaced live embedded-image URL tests with deterministic local coverage (#​617).

v8.12.0 - v8.12.6

  • v8.12.6 (18-April-2025): #​595: [bug] Spring configuration - fix support for simplejavamail.extraproperties
  • v8.12.5 (05-March-2025): Bumped PATCH versions of various dependencies (#​553, #​554, #​555, #​562, #​567)
  • v8.12.4 (12-December-2024): #​558: [bug] Mailer.close() exception because it attempts to shutdown batch-module connection pools, even if not available on the classpath
  • v8.12.3 (25-November-2024): #​563: [enhancement] Add getter for Authenticated SOCKS server port
  • v8.12.2 (05-October-2024): #​552: [bug] support iCalendar events with METHOD defined in body instead of Content-Type
  • v8.12.1 (02-October-2024): #​533: [maintenance] Bump com.github.therapi:therapi-runtime-javadoc-scribe from 0.13.0 to 0.15.0
  • v8.12.1 (02-October-2024): #​532: [maintenance] Bump com.sanctionco.jmail:jmail from 1.4.1 to 1.6.3
  • v8.12.1 (02-October-2024): #​531: [maintenance] Bump com.github.bbottema:java-socks-proxy-server from 4.0.0 to 4.1.2
  • v8.12.1 (02-October-2024): #​528: [maintenance] Bump com.github.davidmoten:subethasmtp from 7.0.1 to 7.1.1
  • v8.12.1 (02-October-2024): #​522: [maintenance] Bump jakarta.annotation:jakarta.annotation-api from 1.3.5 to 3.0.0
  • v8.12.0 (26-September-2024): #​550: [bug] Environment variables are not being loaded properly
  • v8.12.0 (26-September-2024): #​538: [bug] System properties are only read if configuration file exists in class path
  • v8.12.0 (26-September-2024): #​546: [Enhancement] Trim whitespace in encoder values for Content-Encoding

v8.11.0 - v8.11.3

  • v8.11.3 (15-September-2024): #​543: [Enhancement] reduce log spam from the batch-module
  • v8.11.2 (08-June-2024): #​530: [Bug] After converting Outlook .msg to EML, bullet lists have duplicate numbering HTML converted from RTF
  • v8.11.1 (28-May-2024): #​529: Bump smtp-connection-pool from 2.3.2 to 2.3.3 which improves performance and fixes a rare ConcurrentModificationException
  • v8.11.1 (28-May-2024): #​527: Bump org.slf4j:slf4j-api from 2.0.9 to 2.0.13
  • v8.11.1 (28-May-2024): #​523: Bump org.jacoco:jacoco-maven-plugin from 0.8.5 to 0.8.12
  • v8.11.0 (25-May-2024): #​526: When reading .msg files the RTF converted to HTML is garbled in some cases where the appropriate charset is not detected properly

NOTE: v8.11.0 contains many (minor) dependency updates to resolve CVE issues, including:

  • parent POM upgrade: Upgrades test dependencies as well as SLF4J versions
  • outlook-message-parser 1.13.2 -> 1.14.0
  • java-reflection 4.0.1 -> 4.0.2
  • smtp-connection-pool 2.3.1 -> 2.3.2
  • utils-mail-dkim 3.1.0 -> 3.2.0
  • jakarta.mail-api 2.1.2 -> 2.1.3
  • angus-mail 2.0.2 -> 2.0.3
  • therapi-runtime-javadoc 0.13.0 -> 0.15.0
  • kryo 5.0.0-RC1 -> 5.6.0
  • maven-assembly-plugin 3.1.0 -> 3.7.1 (only for the CLI module during build)

v8.10.0 - v8.10.1

  • v8.10.1 (04-May-2024): #​510: Update upstream dependency generic-object-pool, which solves a critical bug when there are exceptions during allocation
  • v8.10.0 (30-April-2024): #​508: [enhancement+bug] Make EmailConverter API more consistent regarding Session parameter, don't use Session.getDefaultInstance anymore and fix bug where emlToEmailBuilder used emlToMimeMessage

v8.9.0 (26-April-2024)

  • #​507: [security] Update 3rd party dependencies to get rid of all currently known CVE issues (see issue for details)

v8.8.0 - v8.8.4

  • v8.8.4 (23-April-2024): #​506: [CVE] Upgrade utils-mail-smime dependency to 2.3.2, to resolve CVE issue in bouncycastle
  • v8.8.3 (13-April-2024): #​502: [Bug] Message headers not treated with case insensitivity as per RFC, causing deviating headers to slip through the filters
  • v8.8.2 (05-April-2024): #​495: Add config support for 'verifyingServerIdentity' with SMTP, also: since Angus 1.1.0 (8.6.0) server identity checks are on by default and can be countered by mailerBuilder.verifyingServerIdentity(false)
  • v8.8.2 (05-April-2024): #​501: [dependency] Update outlook-message-parser dependency, which has improved support for X500 addresses
  • v8.8.2 (05-April-2024): #​499 (fix): [maintenance] Added missing finer-grained DKIM Spring Boot properties
  • v8.8.1 (04-April-2024): #​500: [bug] Fix parsing addresses from headers in EML files, like a Disposition-Notification-To with umlaut
  • v8.8.0 (22-March-2024): #​499: [Enhancement] Expose finer-grained DKIM configuration through the builder api and disable 'l-param' by default)

NOTE: release 8.8.0 changes the default for DKIM signing from 'l-param' true to false. If you rely on this feature, you need to enable it explicitly. Refer to the DKIM documentation for the update.

v8.7.0 - v8.7.1

  • v8.7.1 (20-March-2024): #​498: Make S/MIME algorithms configurable (signature algorithm for signing, key encapsulation and cipher algorithms for encryption)
  • v8.7.1 (20-March-2024): #​497: Order of attachments is lost when converting a MimeMessage to an Email
  • v8.7.0 (20-March-2024): don't use this version: versioning messed up

NOTE: this breaks the API for S/MIME related builder methods. Refer to the S/MIME documentation for the new API.

v8.6.0 - v8.6.3

  • v8.6.3 (13-February-2024): #​491: [bug] Attachment body parts should separately parse Content-Disposition and ContentID, possible resulting in a downloadable attachment that is also embedded
  • v8.6.2 (27-January-2024): #​493: [bug] don't require smime-module when adding collection of headers (also used when copying email)
  • v8.6.1 (18-January-2024): #​487: Move header filtering from MimeMessageParser to EmailConverter, thereby enabling access to all parsed headers when using MimeMessageParser directly
  • v8.6.1 (18-January-2024): #​489: Finished update to Angus Mail by updating activation dependency
  • v8.6.0 (17-January-2024): #​489: Update to Angus Mail

NOTE: this release switches to Angus Mail which should be a transparent change, but if you encounter any issues, please report them.
One known issue is that Angus, since 1.1.0, performs server identity checks by default, which was previously disabled for SMTP. If you encounter issues with this, you can disable it with mailerBuilder.verifyingServerIdentity(false) and starting from 8.8.2, this also works with SMTP transport strategy (see #​495).

v8.5.0 - v8.5.1

  • v8.5.1 (15-December-2023): #​486: [dependency] Handle Outlook's Non-Standard S/MIME Signed Messages
  • v8.5.0 (13-December-2023): #​484: [bug] Addresses passed as string are not always interpreted correctly

v8.4.0 (12-December-2023)

  • #​483: Enhancement: add native support for overriding envelope-level receiver(s)

v8.3.0 - v8.3.5

  • v8.3.5 (10-December-2023): #​482 Bug: 'IllegalArgumentException: emailAddressList is required' when parsing mail with incorrect recipients from Outlook message
  • v8.3.4 (08-December-2023): #​481 Enhancement: don't crash on invalid empty embedded images when parsing Outlook messages
  • v8.3.3 (03-December-2023): #​477 Enhancement: Support Exchange proprietary addresses (X.500 DAP)
  • v8.3.2 (26-November-2023): #​480 Bug: Multiple attachments with same name get the same Content-ID, causing them to refer to the same file content
  • v8.3.1 (09-October-2023): #​440 Bug: names manually specified for embedded images are overridden and have extension added, breaking cid: references in HTML body
  • v8.3.0 (09-October-2023): #​475 Enhancement: Add configuration metadata for Spring Boot application properties

v8.2.0 (02-October-2023)

  • #​473 Bugfix: Add missing support for multiple reply-to addresses

v8.1.0 - v8.1.3

  • v8.1.3 (14-July-2023): #​467 Security: Medium severity vulnerability is detected in org.bouncycastle transitive dependency
  • v8.1.3 (14-July-2023): #​466 Maintenance: Let Mailer implement AutoCloseable, so it shuts down the connection pool automatically when disposed of by Spring
  • v8.1.2 (23-June-2023): #​465 Regression bug #​461: Simple Java Mail always requires DKIM/SMIME modules
  • v8.1.1 (07-June-2023): #​461 Bugfix: Fixed MessageID not preserved when signing/encrypting with S/MIME and/or DKIM
  • v8.1.0 (15-April-2023): #​458 Missing osgi headers (#​288) and added support for Apache Karaf
  • v8.1.0 (15-April-2023): #​288 Maintenance: missing OSGI package-exports from core-module

v8.0.0 - v8.0.1

  • v8.0.1 (30-April-2023): #​456: Enhancement: make Content-Transfer encoder detection more lenient, supporting more values from the wild
  • v8.0.0 (08-March-2023): #​451: Feature: Make defaults and overrides a first class feature
  • v8.0.0 (08-March-2023): #​452: Enhancement: with ".disableAllClientValidation(true)", also ignore errors from the completeness check
  • v8.0.0 (08-March-2023): #​450: Bug: when using dispositionNotificationTo or returnReceiptTo mode, when the corresponding emails are not filled, it fails even though it should fall back to replyTo or From
  • v8.0.0 (08-March-2023): #​449: Bug: IllegalArgumentException on parsing empty header name and value (when parsing Outlook message)
  • v8.0.0 (08-March-2023): #​448: Bug: withEmailDefaults and withEmailOverrides does not work with CustomMailer
  • v8.0.0 (08-March-2023): #​447: Enhancement: allow defaults/overrides to ignore individual fields (turn off for specific properties)
  • v8.0.0 (08-March-2023): #​446: Enhancement: add missing defaults properties for DKIM

This release changes how Email instances are built, or more specifically, when defaults and overrides are applied.
There are now overloaded build methods that provide similar behaviour as previous versions.

v7.9.0 - v7.9.1

  • v7.9.1 (22-February-2023): #​444 Bugfix: encoded delimited recipients in EML not parsed properly
  • v7.9.0 (21-February-2023): #​344 Enhancement: make DKIM signing more flexible by allowing header exclusions in DKIM signature

v7.8.0 - v7.8.3

  • v7.8.3 (21-February-2023): #​293 Bugfix: Decoding missing in a few placed when parsing MimeMessage or sending an Email
  • v7.8.2 (09-February-2023): #​442 Enhancement: Simple Java Mail should throw an exception when trying to utilize S/MIME with smime-module on the classpath
  • v7.8.1 (01-February-2023): #​438 Bug: properly Fail-Fast in case of Transport claim timeout in the batch-module, rather than running into NPE further down the line
  • v7.8.0 (24-January-2023): #​436 Enhancement: add mailerBuilder.withTransportModeLoggingOnly() as mailer API entry point
  • v7.8.0 (24-January-2023): #​435 Enhancement: SMTP server config should be optional in case a CustomMailer is used
  • v7.8.0 (24-January-2023): #​427 Feature: set a maximum email size on Mailer level which throws EmailToBig exception when exceeded

v7.7.0 - v7.7.1

  • v7.7.1 (18-January-2023): #​434 Regression bug in #​430: Email parameter missing in CustomMailer interface
  • v7.7.0 (17-January-2023): #​430 Enhancement: auto-reconnect (if needed) when reclaiming a Transport connection from the SMTP connection
  • v7.7.0 (17-January-2023): #​383 Feature: be able to set defaults and overrides on the Mailer level, rather than email or global level

7.7.0 moves the conversion of Email to MimeMessage to after a Transport instance has been selected (in case of a cluster of SMTP servers),
so we can apply defaults/overrides on the Mailer level, meaning you can configure 'global' values for individual SMTP servers
(like a fixed FROM per server).

v7.6.0 (05-January-2023)

  • #​421 Enhancement: Add support for OAUTH2 authentication

v7.5.0 - v7.5.2

  • v7.5.2 (25-December-2022): #​429 Bug: wrong username property used when password authentication is not needed
  • v7.5.1 (12-December-2022): #​416 Bug: Support encoder names regardless of their case ("base64" is the same as "BASE64")
  • v7.5.1 (12-December-2022): #​424 Maintenance: bump JMail dependency from 1.2.1 to 1.4.1
  • v7.5.0 (28-July-2022): #​411 Enhancement: expose validation sub steps in the MailerHelper class for the completeness check, CRLF inject scans and address validations
  • v7.5.0 (28-July-2022): #​410 Bug: CRLF injection scan missing for dispositionNotificationTo and returnReceiptTo
  • v7.5.0 (28-July-2022): #​390 Enhancement: make client sided validation optional, turning off address validation and CRLF injection detection

v7.5.1 (12-December-2022)

  • #​416 Bug: Support encoder names regardless of their case ("base64" is the same as "BASE64")
  • #​424 Maintenance: bump JMail dependency from 1.2.1 to 1.4.1

v7.5.0 (28-July-2022)

  • #​411 Enhancement: expose validation sub steps in the MailerHelper class for the completeness check, CRLF inject scans and address validations
  • #​410 Bug: CRLF injection scan missing for dispositionNotificationTo and returnReceiptTo
  • #​390 Enhancement: make client sided validation optional, turning off address validation and CRLF injection detection

v7.4.0 (19-July-2022)

  • #​407 Enhancement: Process all Outlook message headers, either copying the as-is or translating them to respective Simple Java Mail API calls
  • #​404 Minor bugfix: the new attachment's contentDescription was missing in Email.toString()

v7.3.0 (15-July-2022)

  • #​405 Feature: Expand email builder API to support forced content Content-Transfer-Encoding for attachments, like quoted-printable, base64, 7BIT and others
  • #​404 Feature: Expand email builder API to support Content-Description on attachments

v7.2.0 - v7.2.1

  • v7.2.1 (13-July-2022): #​396 Enhancement: make Outlook support tolerant of invalid/empty nested Outlook message attachments
  • v7.2.0 (13-July-2022): #​399 Feature: Expand email builder API to support selective content encoding, like quoted-printable, base64, 7BIT and others

v7.1.0 - v7.1.3

  • v7.1.3 (12-July-2022): #​403 Security: Bump zip4j (only used during testing)
  • v7.1.2 (12-July-2022): #​401 Enhancement: Add HEIC and WEBP support when dynamically resolving embedded images from classpath
  • v7.1.2 (12-July-2022): #​402 Security: Update Log4j to 2.17.1
  • v7.1.2 (12-July-2022): #​393 Security: Update Apache POI and POI Scratchpad
  • v7.1.1 (27-March-2022): #​387 Bug: memory leak in SMPT connection pool when 3rd party deallocation failed with exception
  • v7.1.0 (25-January-2022): #​379 Maintenance: Adjust dependencies and make Java 9+ friendly

v7.0.1 - v7.0.2

  • v7.0.2 (25-January-2022): #​329 Enhancement: Exceptions cause error-level logging in addition to rethrowing the exception, but should just include the message in a custom exception
  • v7.0.2 (25-January-2022): #​378 Bug: package org.simplejavamail.internal.modules causes split package problem in Java9+
  • v7.0.1 (22-January-2022): #​375 Bug: batch-module gives error when there is a custom mailer

v7.0.0 (2-January-2022)

It has been two years since the last major release, but 7.0.0 finally here!

What's new

Major features:

  • #​322 Simple Java Mail migrated to Java 8 finally (see notes below)
  • #​295 And also switched to JavaMail's successor Jakarta Mail 2.0.1 (see notes below)
  • #​323 Solved the great CLI performance problem (now executes near instantly)
  • #​319 Replaced the underlying regex-based email-address validation library with the lexer based JMail, which is faster, correcter, documented better and is more up-to-date with RFC's
  • #​367 The sendMail/testConnection methods now have proper support for CompletableFuture

Bugfixes:

  • #​352 Bug: names regex groups are not supported in Android JVM
  • #​326 Bug: NullPointer when parsing Outlook Message with nested empty Outlook message
  • #​330 Bug: cli expected --mailer arguments duplicated 3 times
  • #​324 Bug: Add back missing log4j2 for CLI library

Maintenance:

  • #​368 Resolve log4j (Java8) vulnerability in Simple Java Mail's CLI module
  • #​330 Improved feedback from failing CLI commands
  • #​327 Implement toString() for Mailer instances for debugging purposes
About the migration

Updating to Java8/Jakarta 2.0.1 posed a challenge as the 3rd party S/MIME library java-utils-mail-smime has been abandoned/archived while developing Simple Java Mail. Furthermore, it was still under LGPL3 license while everything else is ApacheV2.

Thankfully, I obtained permissions from the maintainers -as well as original developers from decades ago on SourceForge- to take both java-utils-mail-smime and java-utils-mail-dkim under my wings at Simple Java Mail and change the licensing model! You can now post issues and pull requests here:

v6.7.0 - v6.7.6

  • v6.7.6 (22-January-2022): #​375 Bug: batch-module gives error when there is a custom mailer
  • v6.7.5 (26-December-2021): #​338 Enhancement: Also return AsyncResponse from plain Mailer.sendEmail(singleArgument) as async can be configured through MailerBuilder now
  • v6.7.4 (25-December-2021): #​331 Enhancement: Coalesce empty SMTP server arguments to null to support CLI better
  • v6.7.3 (25-December-2021): #​335 Bugfix: Precondition nonNull check also checks nonEmpty and breaks on clearEmailAddressCriteria
  • v6.7.2 (25-December-2021): #​318 Maintenance: Allow zero data attachments so Outlook message conversions don't crash and burn
  • v6.7.1 (25-December-2021): #​346 Bugfix: Add option to parse MimeMessage without fetching attachment data from server - Properly return named datasource without fetching all the data if unwanted
  • v6.7.0 (25-December-2021): #​356 Enhancement: Improve for support for Android < 8.0 (Fix NoClassDefFoundError)
  • v6.7.0 (25-December-2021): #​351 Bugfix: emlToEmail() and mimeMessageToEmail() break on mesages with duplicate names and legacy empty nested messages
  • v6.7.0 (25-December-2021): #​347 Maintenance: Reduce log-spam and prevent exception on every module availability check
  • v6.7.0 (25-December-2021): #​346 Feature: Add option to parse MimeMessage without fetching attachment data from server

v6.6.0 - v6.6.2

  • v6.6.2 (23-December-2021): #​365 Security: Resolve log4j vulnerability in Simple Java Mail
  • v6.6.1 (12-June-2021): #​321 Enhancement: Ignore malformed recipient addresses and continue parsing email data
  • v6.6.0 (1-June-2021): #​320 Enhancement: Added default S/MIME signing to Mailer level and fixed crippling performance bug

v6.5.0 - v6.5.4

  • v6.5.4 (22-May-2021): #​315 Enhancement: Nested attachments of Outlook message attachments are now preserved as standard EML MimeMessage attachments

    NOTE: This removes the Kryo dependency

  • v6.5.3 (4-May-2021): #​314 Bugfix: Nested attachments of Outlook message attachments are now preserved, by utilizing Kryo

    NOTE: This add Kryo as extra dependency to the outlook-module (and is subsequently removed in 6.5.4)

  • v6.5.2 (15-April-2021): #​311 Bugfix: text/calendar as string -> ClassCastException (if calendar type is not Inputstream)

  • v6.5.1 (10-April-2021): #​307 / #​310 Bugfix: embedded image resource name got mangled

  • v6.5.0 (16-February-2021): #​298 Enhancement: Nested Outlook messages aren't discarded anymore, but parsed to serialized Email objects

  • v6.5.0 (16-February-2021): #​292 Bugfix: NullPointerException in SmimeUtilFixed when protocol is missing (which is valid)

  • v6.5.0 (16-February-2021): #​289 Bugfix: Support multiple headers with same key

This release breaks all GET/SET api regarding headers used as map (Map<String, T> -> Map<String, Collection<T>>)
This release might break api in the rare case you relied on the attachment list and you have nested Outlook .msg attachments (previously omitted in the results)

v6.4.0 - v6.4.5

  • v6.4.5 (13-Februari-2021): #​306 Maintenance: Update outlook-message-parser to 1.7.9
  • v6.4.5 (13-Februari-2021): #​304 Regression bugfix: batch-module needed for sending mails async, basic version should work without
  • v6.4.5 (13-Februari-2021): #​303 Bugfix: EML Attachments are modified/have the wrong size
  • v6.4.4 (25-October-2020): #​294 Always invoke async success/exception handlers even if set after sending email (behaving more like promises/futures)
  • v6.4.4 (25-October-2020): #​291 On Exception only log the email ID at error level and log the whole email at trace level
  • v6.4.4 (25-October-2020): #​290 Only perform expensive logging logic if respective logging level is enabled
  • v6.4.3 (6-August-2020): #​284 Improved support for Calendar attachments created by gMail
  • v6.4.3 (6-August-2020): [#​283](https:

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@xdev-renovate
xdev-renovate force-pushed the renovate/org.simplejavamail-simple-java-mail-9.x branch from b7ff30a to 42ed18d Compare August 9, 2026 03:30
@xdev-renovate xdev-renovate changed the title Update dependency org.simplejavamail:simple-java-mail to v9.1.7 Update dependency org.simplejavamail:simple-java-mail to v9.2.0 Aug 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant