Skip to content

CHANGELOG.md

Latest commit

 

History

History
371 lines (202 loc) · 23.7 KB

CHANGELOG.md

File metadata and controls

371 lines (202 loc) · 23.7 KB
Raw

Changelog

5.0.2 (2026-08-19)

Bug Fixes

  • spf: expand %{d} macro to the domain currently being evaluated (#126) (53c4522)

5.0.1 (2026-08-07)

Bug Fixes

5.0.0 (2026-08-06)

⚠ BREAKING CHANGES

  • Node.js 20 is no longer supported, the minimum is now 22.19.0 (the engine floor of undici 8).
  • dmarc: adkim=s and aspf=s now actually fail when only the organizational domains match. Previously strict alignment fell through to the relaxed comparison, so these records behaved as adkim=r/aspf=r and such messages passed. Senders that publish strict alignment but sign or send from a different host under the same organizational domain will flip from pass to fail. dmarc.status.header.from now reports the From domain rather than the organizational domain, dmarc.status.header.d reports the domain the record was found at, and dkim.results[].status.aligned is false for org-level-only matches when the domain publishes adkim=s.

Features

  • add seal-only mode to the seal CLI command (#119) (afdfc3d)

Bug Fixes

  • arc: report public key failures instead of a bare arc=fail (3464be7)
  • cli: validate seal-only options and dedupe the seal command paths (17dd59c)
  • close residual parser and DMARC discovery edge cases (f1c28e1)
  • dmarc: normalize tag values and report the correct identifiers (e5dc758)
  • enforce DMARC strict identifier alignment (adkim=s/aspf=s) (0c4bab7)
  • harden tag and header parsers against crafted property keys (7eb9ea2)
  • require Node.js >= 22.19.0 (1c689c5)
  • tools: do not treat a legacy getAlignment options object as strict (2007ab4)

4.13.3 (2026-05-14)

Bug Fixes

4.13.2 (2026-04-10)

Bug Fixes

  • prevent chunk-boundary-dependent DKIM relaxed body hash (9ae9745), closes #115

4.13.1 (2026-03-03)

Bug Fixes

4.13.0 (2026-02-04)

Features

  • bimi: add BIMI headers to VMC validation output (77ce4e8)
  • dkim: add timestamp, expiration, and validity status to output (2267eb7)

Bug Fixes

  • update Node.js requirement to >=20.18.1 (3280a59), closes #109

4.12.1 (2026-02-01)

Bug Fixes

  • upgrade fast-xml-parser to 5.3.4 to resolve DoS vulnerability (60aef5d)

4.12.0 (2025-12-16)

Features

  • add TypeScript type definitions and expand module exports (c1cf880)

Bug Fixes

  • correct variable name in mta-sts domain extraction (e68e2d4)

4.11.0 (2025-10-31)

Features

  • added forwardemail.net to ARC trusted list (#86) (8cb577b)
  • cert-type: BIMI authority information includes the type of the cert ('VMC' or 'CMC') (0dd8db8)
  • deploy: Set up automatic publishing (f9b9c32)
  • dkim-sign: Added new Transfor stream class DkimSignStream to sign emails in a stream processing pipeline (130a1a3)

Bug Fixes

  • ARC: ensure that instance value is 1 if ARC chain does not exist yet (ab4c5e9)
  • ARC: Updated built-in trust list for ARC (ea9fc8c)
  • bimi: Bumped VMC module to add support for GLobalSign VMC root (d0e9ecf)
  • bimi: skip bimi with oversized DKIM signatures (d666d74)
  • BodyHashStream: Skip header (3da03d2)
  • bumped 2022 in copyright notices to 2024 (cc89823)
  • bumped deps (006475e)
  • cli: Updated help strings for the cli script (8a86e51)
  • configure release-please to use v-only tags (122e030)
  • deps: Bumped deps to clear out security warnings (4ca35fe)
  • deps: Bumped deps to get updated vmc root store (5ad7464)
  • deps: Removed uuid dependency in favor of crypto.randomUUID() (0b5d8f5)
  • dkim-relaxed: Faster DKIM hash calculation for relaxed body if the body contains extremely long lines (fd8c89e)
  • dkim-verify: Show the length of the source body in DKIM results (d28663b)
  • dkim: Added new output property mimeStructureStart (8f25353)
  • dkim: New class BodyHashStream (88d2fad)
  • dkim: Store byteLength in BodyHashStream (081f823)
  • dmarc-alignment: Fixed tldts usage to allow private domains (cc7dfa8)
  • downgraded yargs because of ESM (215c71a)
  • ed25519: Fixed ed25519 signing and verification (40f1245)
  • expose verifyASChain (#89) (cd11d85)
  • protect against prototype pollution (3b7515d)
  • psl: Replaced psl module with tldts for up to date public suffix list (cab894b)
  • spf: expand macros in mx mechanism (d8c05f9)
  • spf: optimize dual-stack A/AAAA void lookup counting (3069e5a)
  • use minLength option for rsa keys (#84) (cbfed81)
  • ZMS-246: add required policy headers in BIMI for Apple Mail (#92) (f6b3008)
  • ZMS-262 remove control chars from record add support for mappers in validateTagValueRecord (#95) (42828a6)
  • ZMS-262: Add raw record sanitanization and validation util functions (#93) (e4842cf)

4.10.0 (2025-10-31)

Features

  • added forwardemail.net to ARC trusted list (#86) (8cb577b)
  • cert-type: BIMI authority information includes the type of the cert ('VMC' or 'CMC') (0dd8db8)
  • deploy: Set up automatic publishing (f9b9c32)
  • dkim-sign: Added new Transfor stream class DkimSignStream to sign emails in a stream processing pipeline (130a1a3)

Bug Fixes

  • ARC: ensure that instance value is 1 if ARC chain does not exist yet (ab4c5e9)
  • ARC: Updated built-in trust list for ARC (ea9fc8c)
  • bimi: Bumped VMC module to add support for GLobalSign VMC root (d0e9ecf)
  • bimi: skip bimi with oversized DKIM signatures (d666d74)
  • BodyHashStream: Skip header (3da03d2)
  • bumped 2022 in copyright notices to 2024 (cc89823)
  • bumped deps (006475e)
  • cli: Updated help strings for the cli script (8a86e51)
  • deps: Bumped deps to clear out security warnings (4ca35fe)
  • deps: Bumped deps to get updated vmc root store (5ad7464)
  • deps: Removed uuid dependency in favor of crypto.randomUUID() (0b5d8f5)
  • dkim-relaxed: Faster DKIM hash calculation for relaxed body if the body contains extremely long lines (fd8c89e)
  • dkim-verify: Show the length of the source body in DKIM results (d28663b)
  • dkim: Added new output property mimeStructureStart (8f25353)
  • dkim: New class BodyHashStream (88d2fad)
  • dkim: Store byteLength in BodyHashStream (081f823)
  • dmarc-alignment: Fixed tldts usage to allow private domains (cc7dfa8)
  • downgraded yargs because of ESM (215c71a)
  • ed25519: Fixed ed25519 signing and verification (40f1245)
  • expose verifyASChain (#89) (cd11d85)
  • protect against prototype pollution (3b7515d)
  • psl: Replaced psl module with tldts for up to date public suffix list (cab894b)
  • spf: expand macros in mx mechanism (d8c05f9)
  • spf: optimize dual-stack A/AAAA void lookup counting (3069e5a)
  • use minLength option for rsa keys (#84) (cbfed81)
  • ZMS-246: add required policy headers in BIMI for Apple Mail (#92) (f6b3008)
  • ZMS-262 remove control chars from record add support for mappers in validateTagValueRecord (#95) (42828a6)
  • ZMS-262: Add raw record sanitanization and validation util functions (#93) (e4842cf)

4.9.5 (2025-09-10)

Bug Fixes

  • spf: expand macros in mx mechanism (d8c05f9)

4.9.4 (2025-09-02)

Bug Fixes

  • downgraded yargs because of ESM (215c71a)

4.9.3 (2025-09-02)

Bug Fixes

4.9.2 (2025-08-28)

Bug Fixes

  • ZMS-262 remove control chars from record add support for mappers in validateTagValueRecord (#95) (42828a6)

4.9.1 (2025-08-27)

Bug Fixes

  • ZMS-262: Add raw record sanitanization and validation util functions (#93) (e4842cf)

4.9.0 (2025-08-21)

Features

  • added forwardemail.net to ARC trusted list (#86) (8cb577b)

Bug Fixes

  • expose verifyASChain (#89) (cd11d85)
  • ZMS-246: add required policy headers in BIMI for Apple Mail (#92) (f6b3008)

4.8.6 (2025-05-26)

Bug Fixes

  • ARC: Updated built-in trust list for ARC (ea9fc8c)
  • use minLength option for rsa keys (#84) (cbfed81)

4.8.5 (2025-05-11)

Bug Fixes

  • deps: Bumped deps to get updated vmc root store (5ad7464)

4.8.4 (2025-04-21)

Bug Fixes

  • bimi: Bumped VMC module to add support for GLobalSign VMC root (d0e9ecf)

4.8.3 (2025-04-20)

Bug Fixes

  • protect against prototype pollution (3b7515d)

4.8.2 (2024-12-19)

Bug Fixes

  • ARC: ensure that instance value is 1 if ARC chain does not exist yet (ab4c5e9)

4.8.1 (2024-11-05)

Bug Fixes

  • cli: Updated help strings for the cli script (8a86e51)

4.8.0 (2024-11-05)

Features

  • cert-type: BIMI authority information includes the type of the cert ('VMC' or 'CMC') (0dd8db8)

4.7.3 (2024-10-21)

Bug Fixes

  • BodyHashStream: Skip header (3da03d2)

4.7.2 (2024-10-02)

Bug Fixes

  • dkim: Store byteLength in BodyHashStream (081f823)

4.7.1 (2024-10-02)

Bug Fixes

  • dkim: New class BodyHashStream (88d2fad)

4.7.0 (2024-10-02)

Features

  • dkim-sign: Added new Transfor stream class DkimSignStream to sign emails in a stream processing pipeline (130a1a3)

4.6.9 (2024-08-22)

Bug Fixes

  • deps: Removed uuid dependency in favor of crypto.randomUUID() (0b5d8f5)
  • dkim-relaxed: Faster DKIM hash calculation for relaxed body if the body contains extremely long lines (fd8c89e)

4.6.8 (2024-06-04)

Bug Fixes

  • dmarc-alignment: Fixed tldts usage to allow private domains (cc7dfa8)

4.6.7 (2024-05-30)

Bug Fixes

  • psl: Replaced psl module with tldts for up to date public suffix list (cab894b)

4.6.6 (2024-05-13)

Bug Fixes

  • deps: Bumped deps to clear out security warnings (4ca35fe)

4.6.5 (2024-02-12)

Bug Fixes

  • dkim: Added new output property mimeStructureStart (8f25353)

4.6.4 (2024-02-05)

Bug Fixes

  • ed25519: Fixed ed25519 signing and verification (40f1245)

4.6.3 (2024-01-26)

Bug Fixes

  • bumped 2022 in copyright notices to 2024 (cc89823)

4.6.2 (2024-01-25)

Bug Fixes

  • bimi: skip bimi with undersized DKIM signatures (d666d74)

4.6.1 (2024-01-24)

Bug Fixes

  • dkim-verify: Show the length of the source body in DKIM results (d28663b)

4.6.0 (2023-11-02)

Features

  • deploy: Set up automatic publishing (f9b9c32)