What's Changed
- fix: escape arbitrary input in textproto errors (CVE-2026-42507) by @jhillyerd in #399
- chore: go fix by @zdiff in #400
- Ensuring returned
errors include a stack by @dcormier in #404 - build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #402
- build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 by @dependabot[bot] in #403
- build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #407
- mediatype: dedup parameters by exact name, not substring by @binggao1230 in #406
- fix: call ReadPartErrorPolicy for Base64Cleaner-collected errors (#315) by @patchwright in #409
- Add ContentTransferEncoding field to force CTE on a Part by @jhillyerd in #396
- Close the header section when a part has an empty body by @hdimer in #410
- Add Part.DeleteChild to remove a child from the tree by @ChrisJr404 in #411
- Add MarshalJSON to Envelope and Part by @ChrisJr404 in #412
- Add MaxMIMEParts option to cap parsed MIME parts by @jhillyerd in #413
New Contributors
- @zdiff made their first contribution in #400
- @binggao1230 made their first contribution in #406
- @patchwright made their first contribution in #409
- @hdimer made their first contribution in #410
- @ChrisJr404 made their first contribution in #411
Full Changelog: v2.4.1...v2.5.0