Update dependency @nestjs/core to v11 [SECURITY] #40

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

renovate wants to merge 1 commit into master from renovate/npm-nestjs-core-vulnerability

+3,511 −1,199

renovate bot commented Aug 15, 2025 •

edited

Loading

This PR contains the following updates:

Package	Change	Age	Confidence
@nestjs/core (source)	`^5.3.0` -> `^11.0.0`

GitHub Vulnerability Alerts

CVE-2023-26108

Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open.

Release Notes

nestjs/nest (@nestjs/core)

`v11.1.6`

v11.1.6 (2025-08-07)

Bug fixes

core
- #15504 fix(core): fix race condition in class dependency resolution from imported modules (@hajekjiri)
- #15469 fix(core): attach root inquirer for nested transient providers (@kamilmysliwiec)
microservices
- #15508 fix(microservices): report correct buffer length in exception (@kim-sung-jee)
- #15492 fix(microservices): fix kafka serilization of class instances (@LeonBiersch)

Dependencies

platform-fastify
- #15493 chore(deps): bump @fastify/cors from 11.0.1 to 11.1.0 (@dependabot[bot])

Committers: 6

Jiri Hajek (@hajekjiri)
Kamil Mysliwiec (@kamilmysliwiec)
Leon Biersch (@LeonBiersch)
Seongjee Kim (@kim-sung-jee)
@premierbell
pTr (@ptrgits)

`v11.1.5`

v11.1.5 (2025-07-18)

Dependencies

platform-express
- #15425 chore(deps): bump multer from 2.0.1 to 2.0.2 in /packages/platform-express (@dependabot[bot])

`v11.1.4`

v11.1.4 (2025-07-16)

Bug fixes

platform-fastify
- #15385 fix(testing): auto-init fastify adapter for middleware registration (@mag123c)
core, testing
- #15405 fix(core): fix race condition in class dependency resolution (@hajekjiri)
core
- #15333 fix(core): Make flattenRoutePath return a valid module (@gentunian)
microservices
- #15305 fix(microservices): Revisit RMQ pattern matching with wildcards (@getlarge)
- #15250 fix(constants): update RMQ_DEFAULT_QUEUE to an empty string (@EeeasyCode)

Enhancements

platform-fastify
- #14789 feat(fastify): add decorator for custom schema (@piotrfrankowski)
common, core, microservices, platform-express, platform-fastify, websockets
- #15386 feat: enhance introspection capabilities (@kamilmysliwiec)
core
- #15374 feat: supporting fine async storage control (@Farenheith)

Dependencies

platform-ws
- #15350 chore(deps): bump ws from 8.18.2 to 8.18.3 (@dependabot[bot])
platform-fastify
- #15278 chore(deps): bump fastify from 5.3.3 to 5.4.0 (@dependabot[bot])

Committers: 11

Alexey Filippov (@SocketSomeone)
EFIcats (@ext4cats)
Edouard Maleix (@getlarge)
JaeHo Jang (@mag123c)
Jiri Hajek (@hajekjiri)
Kamil Mysliwiec (@kamilmysliwiec)
Khan / 이창민 (@EeeasyCode)
Peter F. (@piotrfrankowski)
Sebastian (@gentunian)
Thiago Oliveira Santos (@Farenheith)
jochong (@jochongs)

`v11.1.3`

v11.1.3 (2025-06-06)

Bug fixes

core
- #15201 fix(core): gracefully shutdown the app when repl exits (@dzhlobo)

Enhancements

common
- #15209 feat: add string array type to disposition (@fjodor-rybakov)
common, core
- #15203 feat(core): defer initialization connected microservice (@isaryy)

Dependencies

platform-express
- #15232 chore(deps): bump multer from 2.0.0 to 2.0.1 (@dependabot[bot])

Committers: 3

Dmitry Zhlobo (@dzhlobo)
@fjodor-rybakov
@isaryy

`v11.1.2`

v11.1.2 (2025-05-26)

Bug fixes

microservices
- #15172 fix(microservices): support custom strategy in async usefactory config (@mag123c)
- #15166 fix(microservice): prevent error logs during redis client shutdown (@janroker)

Dependencies

common
- #15185 chore(deps): bump file-type from 20.5.0 to 21.0.0 (@dependabot[bot])
platform-express
- #15159 chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0 (@dependabot[bot])

Committers: 2

JaeHo Jang (@mag123c)
Jan Roček (@janroker)

`v11.1.1`

v11.1.1 (2025-05-14)

Bug fixes

core
- #15056 fix(core): HTTP adapter error mapping (@maxbronnikov10)
microservices
- #15062 fix(microservices): ensure all redis and amqp client closes properly (@yatin166)
- #15032 fix(microservices): ensure all the amqp connections are closed properly (@yatin166)
- #15020 fix(microservices): ensure all redis connections are closed (@yatin166)
core, platform-fastify
- #15061 fix(core): bring back getHeader and appendHeader methods from AbstractHttpAdapter (@micalevisk)
platform-express
- #15010 feat: remove use of pipeline (@jmcdo29)

Enhancements

microservices
- #14606 feat(microservices): add specific transport id to microservices (@maxbronnikov10)
- #15057 feat(microservices): Allow custom exchangeType as string for plugin compatibility (@ChangmoKang)
- #15072 feat(microservices): Add exchange arguments to RabbitMQ (@gapon2401)

Dependencies

platform-fastify
- #15129 chore(deps): bump fastify from 5.3.2 to 5.3.3 (@dependabot[bot])
platform-ws
- #15068 chore(deps): bump ws from 8.18.1 to 8.18.2 (@dependabot[bot])
common
- #15029 chore(deps): bump file-type from 20.4.1 to 20.5.0 (@dependabot[bot])

Committers: 7

Antonio Tripodi (@Tony133)
Changmo Kang (Ryan) (@ChangmoKang)
Igor Gaponov (@gapon2401)
Jackie McDoniel (@jmcdo29)
Maxim Bronnikov (@maxbronnikov10)
Micael Levi L. Cavalcante (@micalevisk)
Yatin Gaikwad (@yatin166)

`v11.1.0`

v11.1.0 (2025-04-23)

Enhancements

microservices
- #14540 feat(microservices): add support for topic exchange (rabbitmq) (@kamilmysliwiec)

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

`v11.0.21`

v11.0.21 (2025-04-23)

Enhancements

common
- #14995 feat(common): Add fallbackToMimetype support in FileTypeValidator (@mag123c)

Dependencies

platform-fastify
- #14989 fix(deps): update dependency fastify to v5.3.2 [security] (@renovate[bot])

Committers: 1

JaeHo Jang (@mag123c)

`v11.0.20`

What's Changed

refactor(common): Prevent JavaScript being wrapped in eval by @Borewit in #14974

New Contributors

@Borewit made their first contribution in #14974

Full Changelog: nestjs/nest@v11.0.19...v11.0.20

`v11.0.19`

`v11.0.18`

What's Changed

chore(common): temporarily move file-type to regular deps d9a69a3

Full Changelog: nestjs/nest@v11.0.17...v11.0.18

`v11.0.17`

`v11.0.16`

v11.0.16 (2025-04-11)

fix(common): use file-type to validate file mimetypes by @Chathula in #14881

`v11.0.15`

v11.0.15 (2025-04-10)

Bug fixes

platform-fastify
- #14935 fix(fastify): methods comparison (@johaven)

Committers: 1

Johan Legrand (@johaven)

`v11.0.14`

v11.0.14 (2025-04-09)

Bug fixes

platform-fastify
- #14511 fix(fastify): adds the non-standard http methods to the instance (@johaven)

Committers: 1

Johan Legrand (@johaven)

`v11.0.13`

v11.0.13 (2025-04-03)

Bug fixes

platform-fastify
- #14895 fix(fastify-adapter): global prefix exclusion path handling w/middleware (@KyleLilly)
microservices
- #14869 fix(microservices): do not re-create client connection once get client by service name (@mingo023)

Dependencies

platform-express
- #14883 fix(deps): update dependency express to v5.1.0 (@renovate[bot])
- #14817 fix(deps): update dependency multer to v1.4.5-lts.2 (@renovate[bot])
platform-fastify
- #14861 fix(deps): update dependency fastify to v5.2.2 (@renovate[bot])
- #14864 chore(deps): bump @fastify/cors from 11.0.0 to 11.0.1 (@dependabot[bot])

Committers: 2

Kyle Lilly (@KyleLilly)
Minh Ngo (@mingo023)

`v11.0.12`

v11.0.12 (2025-03-19)

Bug fixes

core
- #14803 fix(core): infinite loop on broken circular reference (@kamilmysliwiec)
- #14792 dependencies not resolving for request-scoped lazy providers (@anizozina)

Enhancements

core
- #14802 feat(core): add options to the legacy route converter (@kamilmysliwiec)

`v11.0.11`

v11.0.11 (2025-02-28)

Enhancements

platform-fastify
- #14677 perf: Switch deprecated parser querystring for fast-querystring (@smith558)

Dependencies

platform-fastify
- #14711 fix(deps): update dependency @fastify/cors to v11 (@renovate[bot])
platform-ws
- #14689 chore(deps): bump ws from 8.18.0 to 8.18.1 (@dependabot[bot])

Committers: 1

Stanislav (Stanley) Modrak (@smith558)

`v11.0.10`

v11.0.10 (2025-02-17)

Bug fixes

microservices
- #14605 fix(microservices): server send drops emitted value (@shprota)
platform-express
- #14640 fix(platform-express) respect custom parser middlewares in Express 5 (@luddwichr)

`v11.0.9`

v11.0.9 (2025-02-10)

Bug fixes

core
- #14597 perf(core): use topology tree for calculating distance (depth) (@kamilmysliwiec)
common
- #14579 fix(common): revert to original value (swc builders regression) (@kamilmysliwiec)

Committers: 2

Kamil Mysliwiec (@kamilmysliwiec)

`v11.0.8`

v11.0.8 (2025-02-06)

Bug fixes

common
- #14546 fix(common): addLeadingSlash optional group support (@dcharbonnier)
platform-express
- #14574 fix(platform-express) make check for existing middlewares work with Express 5 (@luddwichr)

Committers: 4

Ghassen Rjab (@GhassenRjab)
Shay Molcho (@shaymolcho)
@dcharbonnier
@luddwichr

`v11.0.7`

v11.0.7 (2025-01-31)

Bug fixes

core
- #14523 fix: middleware sort issues (@rbnayax)

Committers: 1

@rbnayax

`v11.0.6`

v11.0.6 (2025-01-27)

Bug fixes

core
- #14522 fix(core): allow optional named wildcard groups (@kamilmysliwiec)

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

`v11.0.5`

v11.0.5 (2025-01-23)

Bug fixes

core
- #14495 fix(core): global module middleware should be executed first (@kamilmysliwiec)

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

`v11.0.4`

`v11.0.3`

`v11.0.2`

`v11.0.1`

`v11.0.0`

v11.0.0 (2025-01-16)

Article: https://trilon.io/blog/announcing-nestjs-11-whats-new
Migration guide: https://docs.nestjs.com/migration-guide 👈 👈 👈

⚠️ Node v16 and v18 are no longer supported (>= v20 is required).

Features

common, core, microservices
- #14142 feat(microservices): add status, unwrap, on methods to microservice transporters (clients/servers) (@kamilmysliwiec)
- #14121 feat(common): add json logger, built-in logger improvements (@kamilmysliwiec)
common, core
- #13336 feat(core): introduce different module opaque key factories (improve bootstrap performance) (@kamilmysliwiec)
common, core, microservices, platform-express, platform-fastify, platform-socket.io, platform-ws, testing, websockets
- #14238 chore(deps): upgrade to express v5, fastify v5, add legacy route path converter to minimize breaking changes (@kamilmysliwiec)

Enhancements

common
- #14213 feat(common): add error messages for file validators (@mag123c)
- #14131 feat(common): allow passing number to http error createBody (@kamilmysliwiec)
- #14122 feat(common): add ParseDatePipe, add tsdoc to other pipes (@kamilmysliwiec)
- #12735 feat(common)!: type narrowing allowed injection tokens for @Inject() (@micalevisk)
- #12764 fix(common): apply options to plaintoclass in classserializerinterceptor (@kmw14641)
- #14126 fix(common): type narrowing context parameter on createParamDecorator's callback (@EeeasyCode)
- #13628 chore(class-transformer): plainToClass is deprectated and replaced with plainToInstance (@tomflorentin)
microservices
- #14200 feat(microservices): support nats queue per handler (@kamilmysliwiec)
- #13924 feat(microservices): add gracefull shutdown option for nats server (@alinowrouzii)
- #12622 feat: allow for microservice options to come from the di container (@jmcdo29)
- #14134 feat(microservices): add max tcp packet buffer length (@kamilmysliwiec)
- #12761 feat(microservices): ability to use a random port for the TCP server (@PieterScheffers)
websockets
- #14184 feat(websockets): include exception cause to associate error with req (@kamilmysliwiec)
common, core, microservices, websockets
- #14182 feat(common): introduce intrinsic exception (@kamilmysliwiec)
common, core, platform-fastify
- #13278 feat(core,common,platform-fastify): add webdav http methods support (@johaven)
platform-express
- #13407 feat: add multer error fieldname to the exception message (@mmgroner)
platform-ws
- #14127 feat(ws): introduce message parser for ws adapter (@CodyTseng)
platform-fastify
- #14115 chore(fastify): update fastify view options interface (@Tony133)
- #14116 refactor(fastify): update fastify static options interface (@Tony133)
common, core
- #14113 feat(core): allow overriding abortOnError for the select method (@kamilmysliwiec)

Bug fixes

core
- #14267 fix shutdown hooks order (@flovouin)
- #13388 correction of Reflector types (@AlexRMU)
- #14110 fix(core): Calculate module distance after bindGlobalScope (@wenlong-chen)
- #14111 fix(core): Order of module destroy should be the reverse of module init (@wenlong-chen)
- #14097 fix(core): revisit dependencies w/ possibly higher distance (@clkamp)
platform-fastify
- #13797 fix(fastify-adapter): middleware not executed when root path is excluded (@patrickacioli)
microservices
- #14129 fix: rabbitmq bindings and auto-generated queues (@EeeasyCode)
- #14112 fix(microservices): use instance refs for target handler callbacks (@kamilmysliwiec)
- #13468 fix(microservices): delete unnecessary call of grpcClient.start (@kamilmysliwiec)
common
- #14114 fix(common)!: drop broken support for promises on exports of modules (@micalevisk)

Other packages in the ecosystem

config (breaking changes)
- https://github.com/nestjs/config/releases/tag/4.0.0
cli
- https://github.com/nestjs/nest-cli/releases/tag/11.0.0
cache-manager (breaking changes)
- https://github.com/nestjs/cache-manager/releases/tag/3.0.0
cqrs
- https://github.com/nestjs/cqrs/releases/tag/11.0.0

Dependencies

Other
- #14205 chore(dev-deps): upgrade to eslint v9 (@kamilmysliwiec)
- #14428 fix(deps): update dependency mercurius to v16.0.1 (@renovate[bot])
- #14424 fix(deps): update dependency mongoose to v8.9.5 (@renovate[bot])
- #14410 fix(deps): update dependency @fastify/static to v8.0.4 (@renovate[bot])
- #14411 fix(deps): update dependency @fastify/view to v10.0.2 (@renovate[bot])
- #14403 chore(deps): update dependency nats to v2.29.1 (@renovate[bot])
- #14400 fix(deps): update dependency ansis to v3.8.1 (@renovate[bot])
- #14337 chore(deps): update dependency @fastify/multipart to v9.0.2 (@renovate[bot])
- #14415 fix(deps): update dependency mercurius to v16 (@renovate[bot])
- #14397 chore(deps): update dependency webpack-cli to v6 (@renovate[bot])
- #14384 fix(deps): update dependency typescript to v5.7.3 (@renovate[bot])
- #14378 chore(deps): update dependency core-js to v3.40.0 (@renovate[bot])
- #14377 chore(deps): update dependency @eslint/js to v9.17.0 (@renovate[bot])
- #14375 chore(deps): update dependency @grpc/grpc-js to v1.12.5 (@renovate[bot])
- #14370 chore(deps): update dependency ioredis to v5.4.2 (@renovate[bot])
- #14197 chore(deps-dev): bump @fastify/static from 7.0.4 to 8.0.3 (@dependabot[bot])
- #14345 chore(deps): update dependency eslint to v9 (@renovate[bot])
- #14324 fix(deps): update dependency @socket.io/redis-adapter to v8.3.0 (@renovate[bot])
- #14363 chore(deps): bump @fastify/cors from 9.0.1 to 10.0.2 (@dependabot[bot])
- #14354 chore(deps-dev): bump cache-manager from 5.7.6 to 6.3.2 (@dependabot[bot])
- #14021 chore(deps-dev): bump @fastify/view from 9.1.0 to 10.0.1 (@dependabot[bot])
- #14326 fix(deps): update dependency mongodb to v6.12.0 (@renovate[bot])
- #14307 fix(deps): update dependency @grpc/grpc-js to v1.12.4 (@renovate[bot])
platform-fastify
- #14402 fix(deps): update dependency @fastify/middie to v9.0.3 (@renovate[bot])
- #14401 fix(deps): update dependency @fastify/formbody to v8.0.2 (@renovate[bot])
- #14387 fix(deps): update dependency light-my-request to v6.5.1 (@renovate[bot])
- #13990 feat(platform-fastify): added support for Fastify v5 (@Tony133)

Committers: 22

Alex (@AlexRMU)
Ali Nowrouzi (@alinowrouzii)
Antonio Tripodi (@Tony133)
Christian Lütke-Stetzkamp (@clkamp)
Cody Tseng (@CodyTseng)
Flo (@flovouin)
Harel Danieli (@Hareloo)
Jackie McDoniel (@jmcdo29)
JaeHo Jang (@mag123c)
Johaven (@johaven)
Kamil Mysliwiec (@kamilmysliwiec)
Khan / 이창민 (@EeeasyCode)
Max Katz (@maxktz)
Mendel Groner (@mmgroner)
Micael Levi L. Cavalcante (@micalevisk)
Mitchell (@Mittcio)
Patrick Acioli (@patrickacioli)
Pieter Scheffers (@PieterScheffers)
@bestlyg
@kmw14641
@tomflorentin
@wenlong-chen

`v10.4.20`

`v10.4.19`

v10.4.19 (2025-06-09)

Dependencies

platform-express
- chore(deps): bump multer from 2.0.0 to 2.0.1 (@dependabot[bot])

`v10.4.18`

v10.4.18 (2025-05-26)

Dependencies

platform-express
- chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0

`v10.4.17`

`v10.4.16`

What's Changed

fix(common): introduce magic file type validator to nestjs common by @Chathula in #14948

Full Changelog: nestjs/nest@v10.4.15...v10.4.16

`v10.4.15`

v10.4.15 (2024-12-09)

Dependencies

platform-express
- #14282 fix(deps): update dependency express to v4.21.2 (@renovate[bot])

`v10.4.14`

`v10.4.13`

v10.4.13 (2024-12-03)

Bug fixes

common
- #14256 chore(common): Add type declaration for RawBody decorator with pipes (@sapenlei)

Dependencies

#14257 fix(deps): update dependency @fastify/static to v7.0.4 (@renovate[bot])
#14258 fix(deps): update dependency @nestjs/sequelize to v10.0.1 (@renovate[bot])
#14249 chore(deps): bump @apollo/gateway from 2.4.8 to 2.8.5 in /sample/32-graphql-federation-schema-first/users-application (@dependabot[bot])
#14250 chore(deps): update jest monorepo (@renovate[bot])
#14245 chore(deps): update dependency mqtt to v5.10.3 (@renovate[bot])
#14247 fix(deps): update nest monorepo to v10.4.12 (@renovate[bot])
#14251 chore(deps-dev): bump graphql-tools from 9.0.3 to 9.0.5 (@dependabot[bot])
#14246 chore(deps): update nest monorepo (@renovate[bot])

Committers: 3

Kamil Mysliwiec (@kamilmysliwiec)
Micael Levi L. Cavalcante (@micalevisk)
sapenlei (@sapenlei)

`v10.4.12`

v10.4.12 (2024-11-29)

Bug fixes

common
- #14241 fix(common): enforce string type in validationpipe (@LhonRafaat)

Dependencies

Other
- #14243 chore(deps): update dependency @types/node to v20.17.9 (@renovate[bot])
- #14240 chore(deps): update dependency @types/multer to v1.4.12 (@renovate[bot])
- #14239 chore(deps): update dependency @types/chai to v4.3.20 (@renovate[bot])
- #14237 chore(deps): update confluentinc/cp-zookeeper docker tag to v7.7.2 (@renovate[bot])
- #14236 chore(deps): update confluentinc/cp-kafka docker tag to v7.7.2 (@renovate[bot])
- #12253 fix(deps): update apollo graphql packages (@renovate[bot])
- #14235 chore(deps-dev): bump @commitlint/config-angular from 19.5.0 to 19.6.0 (@dependabot[bot])
- #14233 chore(deps): update nest monorepo (@renovate[bot])
- #14232 fix(deps): update dependency path-to-regexp to v3.3.0 [security] (@renovate[bot])
- #14229 chore(deps): update mongo docker tag to v8 (@renovate[bot])
- #14228 chore(deps): update dependency @types/node to v22.10.0 (@renovate[bot])
- #14227 fix(deps): update nest-graphql monorepo to v12.2.1 (@renovate[bot])
- #14224 fix(deps): update dependency sequelize to v6.37.5 (@renovate[bot])
- #14230 chore(deps): update mysql docker tag to v9 (@renovate[bot])
- #14231 fix(deps): update dependency @nestjs/swagger to v8 (@renovate[bot])
common, core, microservices, platform-express, platform-fastify, platform-socket.io, platform-ws, testing, websockets
- #14226 fix(deps): update dependency tslib to v2.8.1 (@renovate[bot])
platform-socket.io
- #14225 fix(deps): update dependency socket.io to v4.8.1 (@renovate[bot])

Committers: 1

Lhon (@LhonRafaat)

`v10.4.11`

`v10.4.10`

v10.4.10 (2024-11-27)

Bug fixes

platform-socket.io, websockets
- #14204 fix(websockets): ensure non-shared servers call close method (@sapenlei)

Dependencies

#14221 chore(deps): update mysql docker tag to v8.4.3 (@renovate[bot])
#14220 chore(deps): update dependency webpack to v5.96.1 (@renovate[bot])
#14219 chore(deps): update dependency nodemon to v3.1.7 (@renovate[bot])
#14218 chore(deps): update confluentinc/cp-zookeeper docker tag to v7.7.1 (@renovate[bot])
#14217 chore(deps): update confluentinc/cp-kafka docker tag to v7.7.1 (@renovate[bot])
#14216 fix(deps): update dependency rimraf to v5.0.10 (@renovate[bot])
#14215 fix(deps): update dependency dotenv to v16.4.5 (@renovate[bot])
#14214 fix(deps): update dependency @grpc/reflection to v1.0.4 (@renovate[bot])
#12940 fix(deps): update dependency mongoose to v8.8.3 (@renovate[bot])
#14207 chore(deps): update dependency @types/dotenv to v8.2.3 (@renovate[bot])
#14208 chore(deps): update dependency @types/node to v20.17.8 (@renovate[bot])
#14209 chore(deps): update dependency amqplib to v0.10.5 (@renovate[bot])
#14212 chore(deps): update dependency webpack to v5.94.0 [security] (@renovate[bot])
#14210 chore(deps): update dependency husky to v9.1.7 (@renovate[bot])
#14211 chore(deps): update nest monorepo (@renovate[bot])
#14206 chore(deps-dev): bump mongoose from 8.8.1 to 8.8.3 (@dependabot[bot])

Committers: 1

sapenlei (@sapenlei)

`v10.4.9`

v10.4.9 (2024-11-25)

Bug fixes

core, microservices
- #13923 fix(core): merge req context with tenant payload in the request instance (@DylanVeldra)
websockets
- #14185 fix(websockets): Prevent HTTP server early close in Socket.IO shutdown (@sapenlei)
common
- #14181 fix(common): fallback to empty string for enums when validating (swc builder) (@kamilmysliwiec)
core
- #13804 fix(core): dependencies not resolving for transient lazy providers (@patrickacioli)
microservices
- #14163 fix(microservices): grpc client streaming bugs (@kamilmysliwiec)

Enhancements

common, core
- #14175 fix(common,core): align the logic of optional provider (@micalevisk)
microservices
- #12954 feat: emit batch (@gunb0s)

Dependencies

Other
- #14192 chore(deps): update dependency webpack to v5.94.0 [security] (@renovate[bot])
- #14188 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/30-event-emitter (@dependabot[bot])
- #14187 chore(deps): bump cookie and @nestjs/platform-express in /sample/34-using-esm-packages (@dependabot[bot])
- #14189 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/19-auth-jwt (@dependabot[bot])
- #14186 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/31-graphql-federation-code-first/posts-application (@dependabot[bot])
- #14183 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/32-graphql-federation-schema-first/posts-application (@dependabot[bot])
- #14176 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/32-graphql-federation-schema-first/users-application (@dependabot[bot])
- #14179 chore(deps-dev): bump @types/mocha from 10.0.9 to 10.0.10 (@dependabot[bot])
- #14174 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/22-graphql

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/npm-nestjs-core-vulnerability branch from 4e8c502 to 2f3b8fe Compare

August 16, 2025 03:52

renovate bot changed the title ~~Update dependency @nestjs/core to v11 [SECURITY]~~ Update dependency @nestjs/core to v9 [SECURITY]

renovate bot force-pushed the renovate/npm-nestjs-core-vulnerability branch from 2f3b8fe to 680389f Compare

August 23, 2025 07:06

renovate bot changed the title ~~Update dependency @nestjs/core to v9 [SECURITY]~~ Update dependency @nestjs/core to v11 [SECURITY]

renovate bot force-pushed the renovate/npm-nestjs-core-vulnerability branch from 680389f to a1e17e4 Compare

August 25, 2025 03:32

renovate bot changed the title ~~Update dependency @nestjs/core to v11 [SECURITY]~~ Update dependency @nestjs/core to v9 [SECURITY]


          Update dependency @nestjs/core to v11 [SECURITY]

d08b0e7

renovate bot force-pushed the renovate/npm-nestjs-core-vulnerability branch from a1e17e4 to d08b0e7 Compare

September 1, 2025 13:44

renovate bot changed the title ~~Update dependency @nestjs/core to v9 [SECURITY]~~ Update dependency @nestjs/core to v11 [SECURITY]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet