From da3e4590270e823440b30da8da3fcc5e9c7eabaa Mon Sep 17 00:00:00 2001
From: YJack0000 <jack@pathors.com>
Date: Wed, 19 Aug 2026 01:48:37 +0800
Subject: [PATCH] chore(deps): mail 2.9.1 for GHSA-mvxr-6m87-mv2q
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

bundle-audit started failing today on a newly published advisory:
malformed RFC 2047 encoded-words let a sender spoof the From address.
This install runs an email inbox, so it is in the affected path. The
upgrade is conservative — no other gem moved; mailer, mailbox and mail
presenter specs are green (238 examples).
---
 Gemfile.lock | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 33bfcf378aaf7..b6c6547493cae 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -553,7 +553,8 @@ GEM
     loofah (2.25.2)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
-    mail (2.8.1)
+    mail (2.9.1)
+      logger
       mini_mime (>= 0.1.1)
       net-imap
       net-pop