v11.1.13

v11.1.13 (2026-02-03)

Bug fixes

• common
  • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

• microservices
  • #16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)
  • #16262 Feat/microservices configurable max buffer size (@jobnow)
• common
  • #16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

• platform-fastify
  • #16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])
• platform-express
  • #16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

• Lee Donghyun (@devizi0)
• Mykhailo Skrypsky (@mixator)
• Neo (@chojs23)
• Praveen Somasundaram (@som14062005)
• Ricardo Gomes (@jobnow)
• 조수민 (@suuuuuuminnnnnn)

v11.1.12

v11.1.12 (2026-01-15)

Bug fixes

• common
  • #16187 fix(common): regression in loading file-type under Windows OS (@iamkanguk97)

Dependencies

• platform-ws
  • #16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@dependabot[bot])
• common
  • #16155 fix(deps): update dependency file-type to v21.3.0 (@renovate[bot])
• platform-fastify
  • #16154 fix(deps): update dependency find-my-way to v9.4.0 (@renovate[bot])

Committers: 3

• Antonio Tripodi (@Tony133)
• KANGUK LEE (@iamkanguk97)
• @miso-kyoungminkim

v10.4.22

What's Changed

• fix(express): Update body-parser to 1.20.4 for CVE-2025-15284 by @Xilis in #16178

Full Changelog: v10.4.21...v10.4.22

v10.4.21

What's Changed

• fix(express): Update express to 4.22.1 to address CVE-2025-15284 by @Xilis in #16157

New Contributors

• @Xilis made their first contribution in #16157

Full Changelog: v10.4.20...v10.4.21

v11.1.11

v11.1.11 (2025-12-29)

Bug fixes

• platform-fastify
  • #16135 fix(platform-fastify): middie bypassing through decoded chars (@kamilmysliwiec)
• core
  • #16133 fix(core): add missing catch handler for forward-ref provider resolution (@coti-z)

Dependencies

• platform-socket.io
  • #16125 fix(deps): update dependency socket.io to v4.8.3 (@renovate[bot])
  • #16114 chore(deps): bump socket.io from 4.8.1 to 4.8.2 (@dependabot[bot])
• platform-fastify
  • #16130 fix(deps): update dependency @fastify/static to v9 (@renovate[bot])
• common
  • #16127 chore(deps): bump file-type from 21.1.1 to 21.2.0 (@dependabot[bot])

Committers: 3

• Himanshu Gupta (@manureja64)
• Kamil Mysliwiec (@kamilmysliwiec)
• coti (@coti-z)

v11.1.10

v11.1.10 (2025-12-22)

Bug fixes

• core
  • #16098 fix(core): instantiate nested transient providers in static context (@mag123c)
  • #16005 fix(core): resolve all providers when using resolve() with each option (@malkovitc)
• microservices
  • #16072 fix(microservices): fix grpc stream method return type (@shash-hq)
• common
  • #16077 fix(common): resolve file-type path explicitly (@shash-hq)
  • #16013 fix(common): Support fallbackToMimetype without buffer (@chenjieya)

Enhancements

• common
  • #16100 fix(common): improve error handling in FileTypeValidator (@malkovitc)
  • #16060 feat(common): add message property to file type validator (@Jo-Minseok)
  • #16079 fix: enhance ValidationPipe (@liu-jin-yi)
• core
  • #15721 feat(core): add Promise support for SSE handlers (@pythonjsgo)
• microservices
  • #15975 feat(microservices): add keepalive support for server side (@OlegStrokan)
• common, core
  • #15986 feat(core): add option for async logger compatibility (@mag123c)

Dependencies

• platform-fastify
  • #16041 fix(deps): update dependency @fastify/cors to v11.2.0 (@renovate[bot])
• platform-express
  • #16002 fix(deps): update dependency express to v5.2.1 (@renovate[bot])
• common
  • #15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@dependabot[bot])

Committers: 11

• Alexander (@pythonjsgo)
• J_Coder (@Jo-Minseok)
• Luke Son (@KAPUIST)
• Oleh Strokan (@OlegStrokan)
• Praveen Somasundaram (@som14062005)
• Shashank (@shash-hq)
• @chenjieya
• @giorgikakauridze
• @mag123c
• chernomortsev evgeny (@malkovitc)
• liu-jin-yi (@liu-jin-yi)

v11.1.9

v11.1.9 (2025-11-14)

Bug fixes

• core
  • #15865 fix(core): make get() throw for implicitly request-scoped trees (@JoeNutt)

Enhancements

• common
  • #15863 feat(common): add method options to @sse decorator (@TomerSteinberg)

Dependencies

• platform-fastify
  • #15899 chore(deps): bump fastify from 5.6.1 to 5.6.2 (@dependabot[bot])

Committers: 4

• Rami (@JoeNutt)
• Rhynel Algopera (@dev-rhynel)
• Tomer Steinberg (@TomerSteinberg)
• WuMingDao (@WuMingDao)

v11.1.8

v11.1.8 (2025-10-27)

Bug fixes

• core
  • #15815 fix(core): ensure nested transient provider isolation (@mag123c)
• platform-fastify
  • #15831 fix(fastify): Migrate fastify top-level options to routerOptions (@kim-sung-jee)

Committers: 2

• JaeHo Jang (@mag123c)
• Seongjee Kim (@kim-sung-jee)

v11.1.7

v11.1.7 (2025-10-21)

Bug fixes

• microservices
  • #15747 Fix/rmq microservice fanout bind (@slon2015)
• platform-fastify
  • #15732 fix: correct parameter type in RouteConstraints decorator (@thedv91)
• core
  • #15571 fix(core): skip lifecycle hooks for non-instantiated transient services (@mag123c)
• common
  • #15577 Add color allowance check to console logger options (@kerryChen95)

Enhancements

• common, platform-socket.io, websockets
  • #15543 feat(websockets): allow manual acknowledgement handling with @ack() decorator (@kim-sung-jee)
• common
  • #15705 fix(core): resolve extras in configurable module builder async methods (@mag123c)
• common, core
  • #15503 feat(common): add force-console option to console logger (@mag123c)
• core
  • #15588 fix(core): improve dependency resolution error messages (@at7211)
• microservices
  • #15598 feat(errors): add InvalidTcpDataReceptionException for handling TCP receive errors​ (@ghyghoo8)

Dependencies

• platform-fastify
  • #15664 chore(deps): bump fastify to 5.6.1 (@dependabot[bot])
• core, platform-express, platform-fastify
  • #15622 fix(deps): update dependency path-to-regexp to v8.3.0 (@renovate[bot])
• common
  • #15566 chore(deps): bump load-esm from 1.0.2 to 1.0.3 (@dependabot[bot])

Committers: 9

• Harry (@thedv91)
• JaeHo Jang (@mag123c)
• Jay-Chou (@at7211)
• Kerry (@kerryChen95)
• Micael Levi L. Cavalcante (@micalevisk)
• Seongjee Kim (@kim-sung-jee)
• SerafimGerasimov (@slon2015)
• @Olexandr88
• ghy (@ghyghoo8)

v11.1.6

v11.1.6 (2025-08-07)

Bug fixes

• core
  • #15504 fix(core): fix race condition in class dependency resolution from imported modules (@hajekjiri)
  • #15469 fix(core): attach root inquirer for nested transient providers (@kamilmysliwiec)
• microservices
  • #15508 fix(microservices): report correct buffer length in exception (@kim-sung-jee)
  • #15492 fix(microservices): fix kafka serilization of class instances (@LeonBiersch)

Dependencies

• platform-fastify
  • #15493 chore(deps): bump @fastify/cors from 11.0.1 to 11.1.0 (@dependabot[bot])

Committers: 6

• Jiri Hajek (@hajekjiri)
• Kamil Mysliwiec (@kamilmysliwiec)
• Leon Biersch (@LeonBiersch)
• Seongjee Kim (@kim-sung-jee)
• @premierbell
• pTr (@ptrgits)