security: remedy dependabot alerts (#2723)

* security: override js-yaml

* security: upgrade vite

* security: update nodemailer

Author: nicktrn

internal-packages/emails/package.json

@@ -6,21 +6,22 @@
   "main": "./src/index.tsx",
   "types": "./src/index.tsx",
   "scripts": {
-    "dev": "PORT=3080 email dev"
+    "dev": "PORT=3080 email dev",
+    "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@aws-sdk/client-ses": "^3.716.0",
+    "@aws-sdk/client-sesv2": "^3.716.0",
     "@react-email/components": "0.0.16",
     "@react-email/render": "^0.0.12",
-    "nodemailer": "^6.9.16",
+    "nodemailer": "^7.0.11",
     "react": "^18.2.0",
     "react-email": "^2.1.1",
     "resend": "^3.2.0",
     "tiny-invariant": "^1.2.0",
     "zod": "3.25.76"
   },
   "devDependencies": {
-    "@types/nodemailer": "^6.4.17",
+    "@types/nodemailer": "^7.0.4",
     "@types/react": "18.2.69"
   },
   "engines": {

internal-packages/emails/src/transports/aws-ses.ts

@@ -1,7 +1,7 @@
 import { render } from "@react-email/render";
 import { EmailError, MailMessage, MailTransport, PlainTextMailMessage } from "./index";
 import nodemailer from "nodemailer"
-import * as awsSes from "@aws-sdk/client-ses"
+import { SESv2Client, SendEmailCommand } from "@aws-sdk/client-sesv2"
 
 export type AwsSesMailTransportOptions = {
   type: 'aws-ses',
@@ -11,13 +11,10 @@ export class AwsSesMailTransport implements MailTransport {
   #client: nodemailer.Transporter;
 
   constructor(options: AwsSesMailTransportOptions) {
-    const ses = new awsSes.SESClient()
+    const sesClient = new SESv2Client()
 
     this.#client = nodemailer.createTransport({
-      SES: {
-        aws: awsSes,
-        ses
-      }
+      SES: { sesClient, SendEmailCommand }
     })
   }
 

package.json

@@ -62,7 +62,7 @@
     "tsx": "^3.7.1",
     "turbo": "^1.10.3",
     "typescript": "5.5.4",
-    "vite": "^4.1.1",
+    "vite": "^5.4.21",
     "vite-tsconfig-paths": "^4.0.5",
     "vitest": "3.1.4"
   },
@@ -88,7 +88,9 @@
       "form-data@^2": "2.5.4",
       "form-data@^3": "3.0.4",
       "form-data@^4": "4.0.4",
-      "axios@1.9.0": ">=1.12.0"
+      "axios@1.9.0": ">=1.12.0",
+      "js-yaml@>=3.0.0 <3.14.2": "3.14.2",
+      "js-yaml@>=4.0.0 <4.1.1": "4.1.1"
     },
     "onlyBuiltDependencies": [
       "@depot/cli",