Skip to content

v3.13.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Oct 07:58
v3.13.0
22f1c63
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

3.13.0 (2026-10-29)

Summary

mailparser now reads the OTP-Token header (draft-goto-otp-token), the header Nodemailer 10.3.0 sets with its otp option, and exposes the one-time passcode as otp: { code, origin } on the simpleParser result and on the MailParser instance. Parsing follows the same rules as PostalMime.

Who should upgrade

No hurry. Upgrade if you want to read one-time passcodes from incoming mail.

Highlights

  • New otp property, set only when the message header has exactly one valid OTP-Token header with a canonical https origin (or an http origin on a loopback host). Headers in MIME parts or forwarded messages are ignored.
  • The header is not authenticated: check that the message has a valid DKIM signature from the domain of the origin before offering the code.
  • otp is experimental and may change in a minor release when the draft does.
  • Dependency update: nodemailer 10.3.0.

Features

  • parse the OTP-Token header into mail.otp (bc20682)

Bug Fixes

Assets 2
Loading