v8.0.0

8.0.0 (2026-10-19)

⚠ BREAKING CHANGES

• the package is built from TypeScript. The lib/ sources and the root index.d.ts are no longer published; deep imports resolve through the mailauth/lib/* exports map, and a path outside that map (such as mailauth/bin/mailauth.js) no longer resolves. The CLI entry is bin/mailauth.cjs. An ES module default import of a deep module that has named exports only (for example import tools from 'mailauth/lib/tools.js') is replaced by named imports. A few declared types were corrected to match what the code returns: DKIMWarning includes 'ams-c-default', and inputs such as ARCData.chain accept the false the library already handled.

Features

• migrate to TypeScript with ES module and CommonJS builds (f0229a4)

Bug Fixes

• bump joi to 18.3.0, libmime to 5.5.1, nodemailer to 10.1.7 and undici to 8.12.2 (78332ca)
• cli: pin commander to 14.x, the last CommonJS major (5f8e6ab)
• cli: ship licenses.txt so that mailauth license works on npm installs (4a5149c)
• dkim: verify messages with many signatures in linear time (ad9107e)
• leave unparsable Received header fields out of receivedChain (4caf090)
• types: declare the SPF limits of authenticate() and the optional policy of validateMx() (3882642)