chore(deps): update nodemailer to v8

[have-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
nodemailer (source)	^7.0.13 -> ^8.0.9

---

Release Notes

nodemailer/nodemailer (nodemailer)

v8.0.9

Compare Source

Bug Fixes

• two pending security advisories (jsonTransport access bypass, List-* CRLF injection) (#​1820) (5f69497)

v8.0.8

Compare Source

Bug Fixes

• enforce strict TLS for OAuth2 and Ethereal credential requests (#​1818) (833d6e5)
• four listener/stream leaks in SMTP transport, connection, pool (#​1817) (850bb91)

v8.0.7

Compare Source

Bug Fixes

• keep domain as UTF-8 when local part is non-ASCII (#​1814) (66d4ecb)

v8.0.6

Compare Source

Bug Fixes

• restore base64 wrap() trim behavior to prevent trailing CRLF (#​1810) (#​1811) (b1ae6c1)

v8.0.5

Compare Source

Bug Fixes

• decode SMTP server responses as UTF-8 at line boundary (95876b1)
• sanitize CRLF in transport name option to prevent SMTP command injection (GHSA-vvjj-xcjg-gr5g) (0a43876)

v8.0.4

Compare Source

Bug Fixes

• sanitize envelope size to prevent SMTP command injection (2d7b971)

v8.0.3

Compare Source

Bug Fixes

• clean up addressparser and fix group name fallback producing undefined (9d55877)
• fix cookie bugs, remove dead code, and improve hot-path efficiency (e8c8b92)
• refactor smtp-connection for clarity and add Node.js 6 syntax compat test (c5b48ea)
• remove familySupportCache that broke DNS resolution tests (c803d90)

v8.0.2

Compare Source

Bug Fixes

• merge fragmented display names with unquoted commas in addressparser (fe27f7f)

v8.0.1

Compare Source

Bug Fixes

• absorb TLS errors during socket teardown (7f8dde4)
• absorb TLS errors during socket teardown (381f628)
• Add Gmail Workspace service configuration (#​1787) (dc97ede)

v8.0.0

Compare Source

⚠ BREAKING CHANGES

• Error code 'NoAuth' renamed to 'ENOAUTH'

Bug Fixes

• add connection fallback to alternative DNS addresses (e726d6f)
• centralize and standardize error codes (45062ce)
• harden DNS fallback against race conditions and cleanup issues (4fa3c63)
• improve socket cleanup to prevent potential memory leaks (6069fdc)

---

Configuration

📅 Schedule: Branch creation - "" in timezone America/Edmonton, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

📦 Version Bump Preview

When this PR is merged, packages will receive a patch
version bump based on your conventional commits.

What happens on merge?

1. Tests run on main branch
2. Packages are built
3. Versions are bumped automatically
4. The release commit is pushed back to main
5. Packages are published to GitHub Packages
6. Git tags are created