Skip to content

Conversation

@mend-for-github-com
Copy link

@mend-for-github-com mend-for-github-com bot commented Aug 4, 2025

This PR contains the following updates:

Package Type Update Change
nexmo dependencies major ^1.0.0-beta-7 -> ^2.2.1

By merging this PR, the issue #17 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
High High 8.8 CVE-2018-3728
High High 7.5 CVE-2025-65945

Release Notes

nexmo/nexmo-node (nexmo)

v2.2.1

Compare Source

  • Update dependencies to fix security vulnerability (See #​179)

v2.2.0

Compare Source

  • Add support for media API

v2.1.1

Compare Source

Bug Fixes
  • #​125 - Prevent default headers being overwritten in HTTPClient (@​poying)
  • #​155 - Handle 204 status code as a success, not an error (@​AverageMarcus)
  • You can now change the port in HTTPClient (previously forced to use 443)
Documentation
New Features
  • #​139 - Search SMS messages
  • #​140 - Search SMS rejections
  • #​141 - Report conversion data to Nexmo (if enabled on your account)
  • #​169 - Trigger an auto-reload top-up
Other goodies
  • #​111 - We now officially support all LTS node.js versions + the latest current
  • Added Prettier as our formatting tool via eslint. Run npm run lint-fix to automatically fix any formatting issues
  • Added NYC for code coverage. There are currently no thresholds - we'll be adding these in the future
Q&A

Q. What happened to 2.1.0?
A. @​mheap can't computer correctly and published the wrong thing to NPM. As NPM (quite rightly) doesn't let you overwrite tags, we're having to skip to 2.1.1

v2.0.2

Compare Source

  • Remove SDK check for valid phone number, instead leaving this to the API
  • Remove SDK check for valid application type, instead leaving this to the API

v2.0.1

Compare Source

  • FIXED: #​116 - default setting of retry-after for 429 http status code responses

v2.0.0

Compare Source

  • FIXED: #​110 - check the statusCode on the response
  • FIXED: #​114 - handle 429 HTTP status codes
  • UPDATED: To allow errors to be programmatically useful the error callback objects has been updated to {statusCode: STATUS_CODE, body: JSON_BODY, headers: HEADERS}

v1.2.1

Compare Source

v1.2.0

Compare Source

  • ADDED: Add File API to library. nexmo.files.get and nexmo.files.save.

v1.1.2

Compare Source

  • Fixed: Bug #​104 - Fix JSON parsing error

v1.1.1

Compare Source

  • UPDATED: Changed User Agent format to match other libraries
  • FIXED: Bug #​88 - Undefined method when missing method declaration

v1.1.0

Compare Source

  • ADDED: nexmo.generateJwt to generate JWT based on instance credentials
  • ADDED: Nexmo.generateJwt static function to generate JWT

v1.0.0

Compare Source

  • ADDED: applicationId and privateKey properties to first constructor parameter to support JWT generation.
  • ADDED: options.logger to constructor 2nd parameter to allow adding customer logger.
  • ADDED: options.appendToUserAgent to constructor 2nd paramater to append custom string to User-Agent header sent to Nexmo.
  • ADDED: nexmo.calls adding support to create, get, update and delete calls.
  • ADDED: nexmo.applications adding support to create, get, update and delete calls.
  • ADDED: Functionality is now namespaced:
    • nexmo.message
    • nexmo.calls
    • nexmo.number
    • nexmo.verify
    • nexmo.numberInsight
    • nexmo.account
    • nexmo.voice - legacy voice functionality
  • CHANGED: var Nexmo = require('nexmo'); returns a class definition which should be created using the new operator e.g. var nexmo = new Nexmo(args...);.
  • REMOVED: var nexmo = require('nexmo'); no longer exposes singleton functions offered by "easynexmo".

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant