8.0.0 (2026-10-19)
⚠ BREAKING CHANGES
- the package is built from TypeScript. The lib/ sources and the root index.d.ts are no longer published; deep imports resolve through the
mailauth/lib/*exports map, and a path outside that map (such asmailauth/bin/mailauth.js) no longer resolves. The CLI entry is bin/mailauth.cjs. An ES module default import of a deep module that has named exports only (for exampleimport tools from 'mailauth/lib/tools.js') is replaced by named imports. A few declared types were corrected to match what the code returns: DKIMWarning includes 'ams-c-default', and inputs such as ARCData.chain accept thefalsethe library already handled.
Features
- migrate to TypeScript with ES module and CommonJS builds (f0229a4)
Bug Fixes
- bump joi to 18.3.0, libmime to 5.5.1, nodemailer to 10.1.7 and undici to 8.12.2 (78332ca)
- cli: pin commander to 14.x, the last CommonJS major (5f8e6ab)
- cli: ship licenses.txt so that
mailauth licenseworks on npm installs (4a5149c) - dkim: verify messages with many signatures in linear time (ad9107e)
- leave unparsable Received header fields out of receivedChain (4caf090)
- types: declare the SPF limits of authenticate() and the optional policy of validateMx() (3882642)