Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2026

Bumps phpmailer/phpmailer from 6.10.0 to 7.0.2.

Release notes

Sourced from phpmailer/phpmailer's releases.

PHPMailer 7.0.2

This is a maintenance release.

What's Changed

Full Changelog: PHPMailer/PHPMailer@v7.0.1...v7.0.2

PHPMailer 7.0.1

Version 7.0.1 (November 25th, 2025)

New Contributors

... (truncated)

Changelog

Sourced from phpmailer/phpmailer's changelog.

Version 7.0.2 (January 9th, 2026)

Version 7.0.1 (November 25th, 2025)

  • Use From domain when generating CIDs in msgHTML.
  • Update to PHPCompatibility 10, resolve numerous PHPCS issues in PHP 8.5.
  • Revise GitHub actions for PHP 8.5 and experimental 8.6 tests.
  • Switch gmail example from the deprecated IMAP extension to use directorytree/imapengine for IMAP uploads.
  • Set htmlspecialchars() flags explicitly and consistently.
  • Convert XOAUTH2 token exceptions into PHPMailer Exceptions. The original exception is available as an inner exception.
  • Deprecate VERSION constants in POP3 and SMTP classes.
  • Remove dependency on roave/security-advisories; it's now built into composer 2.9.
  • Update Dutch, Esperanto, and Norwegian translations.

Version 7.0.0 (October 15th, 2025)

This is exactly the same as 6.11.1 but bumps the major version number to indicate the presence of a BC break in child classes. Specifically, lang(), setLanguage(), and $language are now static, and should be called statically.

Version 6.12.0 (October 15th, 2025)

This is exactly the same as 6.10.0, reverting all the changes in 6.11.0 and 6.11.1, which inadvertently introduced a BC break affecting child classes. 6.11.1 has been re-released as 7.0.0.

Version 6.11.1 (September 30th, 2025)

  • Avoid function signature problems with the deprecation of $useimap in parseAddresses.

Version 6.11.0 (September 29th, 2025)

  • Add support for RFC4954 two-part authentication for large XOAUTH2 tokens.
  • Also support empty tokens.
  • Avoid bogus static analyser deprecation warnings in setFrom.
  • Make language loading entirely static, thanks to @​SirLouen.
  • Emit warnings when parseAddresses() is used without the IMAP extension.
  • Handle mb_decode_mimeheader changes from PHP 8.3+.
  • Deprecate the charset param to parseAddresses.
  • Fix PHP 8.5 linting issue.
  • Don't use -t switch when calling qmail.
  • Checking for interrupted system calls now works in languages other than English.
  • Add support for extracting gmail transaction IDs after sending.
  • For consistency, the protected ReplyTo property has been changed to match the format used for other address arrays.
  • Fix line length issues when using S/MIME signing.
  • Pin action runners to exact versions to avoid unexpected upstream changes.
Commits
  • ebf1655 7.0.2
  • b938991 Merge pull request #3283 from SirLouen/patch/3282
  • 7e3f243 Merge pull request #3288 from RobinvanderVliet/patch-1
  • 1a0004b Improve memory usage when sending large attachments
  • a969e57 Merge pull request #3287 from PHPMailer/dependabot/github_actions/actions/upl...
  • 28caa24 Merge pull request #3286 from PHPMailer/dependabot/github_actions/action-runn...
  • 5f71068 GH Actions: Bump actions/upload-artifact from 5.0.0 to 6.0.0
  • 827e170 GH Actions: Bump the action-runners group with 3 updates
  • 0d4c5ee fix: Correct sendmail_path validation to ensure proper formatting for sender ...
  • 14e1efe docs: Fixing array multiline syntax for sendmailPathProvider
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.10.0 to 7.0.2.
- [Release notes](https://github.com/PHPMailer/PHPMailer/releases)
- [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md)
- [Commits](PHPMailer/PHPMailer@v6.10.0...v7.0.2)

---
updated-dependencies:
- dependency-name: phpmailer/phpmailer
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jan 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant