Update npm package @types/nodemailer to v6.4.21

[hash-worker]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/nodemailer (source)	6.4.17 -> 6.4.21

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - "before 4am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[vercel]

The pinned version 3.858.0 of @aws-sdk/client-ses conflicts with the newer version (3.901.0) required by the updated @types/[email protected], creating potential type mismatches and duplicate dependencies.

View Details

📝 Patch Details

diff --git a/apps/hash-api/package.json b/apps/hash-api/package.json
index b48c3c3b0..e3bc7eaa3 100644
--- a/apps/hash-api/package.json
+++ b/apps/hash-api/package.json
@@ -25,7 +25,7 @@
   "dependencies": {
     "@apps/hash-graph": "0.0.0-private",
     "@aws-sdk/client-s3": "3.858.0",
-    "@aws-sdk/client-ses": "3.858.0",
+    "@aws-sdk/client-ses": "^3.858.0",
     "@aws-sdk/credential-provider-node": "3.858.0",
     "@aws-sdk/s3-presigned-post": "3.858.0",
     "@aws-sdk/s3-request-presigner": "3.858.0",

Analysis

Duplicate AWS SDK versions causing type mismatches and increased bundle size

What fails: Two versions of @aws-sdk/client-ses are installed: 3.858.0 (pinned) and 3.901.0 (from @types/[email protected]), causing TypeScript to potentially use different type definitions than runtime code in apps/hash-api/src/email/transporters/aws-ses-email-transporter.ts

How to reproduce:

# Check yarn.lock for duplicate entries:
grep -A2 '"@aws-sdk/client-ses@' yarn.lock
# Shows both 3.858.0 and 3.901.0 installed

# Verify @types/nodemailer dependency:
npm view @types/[email protected] dependencies
# Returns: { '@types/node': '*', '@aws-sdk/client-ses': '^3.731.1' }

Result: Yarn installs both versions in the lockfile, increasing bundle size and creating potential for runtime/type inconsistencies where TypeScript may resolve to 3.901.0 types while runtime uses the 3.858.0 implementation

Expected: Single consistent version of @aws-sdk/client-ses used across all dependencies per npm deduplication best practices

Your organization requires reapproval when changes are made, so Graphite has dismissed approvals. See the output of git range-diff at https://github.com/hashintel/hash/actions/runs/18323480961

Your organization requires reapproval when changes are made, so Graphite has dismissed approvals. See the output of git range-diff at https://github.com/hashintel/hash/actions/runs/18688645946

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 55.85%. Comparing base (bfbf447) to head (32780ee).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7729      +/-   ##
==========================================
- Coverage   55.85%   55.85%   -0.01%     
==========================================
  Files        1142     1142              
  Lines      105676   105677       +1     
  Branches     4826     4826              
==========================================
  Hits        59024    59024              
- Misses      45957    45958       +1     
  Partials      695      695              

Flag	Coverage Δ
apps.hash-ai-worker-ts	1.32% <ø> (ø)
apps.hash-api	0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Preview	Updated (UTC)
petrinaut	Skipped		Nov 20, 2025 9:39pm

[vilkinsons]

Superseded by #7854

[hash-worker]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (6.4.21). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.