fix(deps): update dependency @nestjs/common [security] #1342

renovate · 2025-04-25T23:48:50Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@nestjs/common (source)	`^7.0.0 \|\| ^8.0.0` -> `^7.0.0 \|\| ^8.0.0 \|\| ^11.0.0`
@nestjs/common (source)	`8.4.7` -> `10.4.16`

GitHub Vulnerability Alerts

CVE-2024-29409

File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.

Release Notes

nestjs/nest (@nestjs/common)

What's Changed

refactor(common): Prevent JavaScript being wrapped in eval by @Borewit in https://github.com/nestjs/nest/pull/14974

New Contributors

@Borewit made their first contribution in https://github.com/nestjs/nest/pull/14974

Full Changelog: nestjs/nest@v11.0.19...v11.0.20

`v11.0.19`

Compare Source

`v11.0.18`

Compare Source

What's Changed

chore(common): temporarily move file-type to regular deps nestjs/nest@d9a69a3

Full Changelog: nestjs/nest@v11.0.17...v11.0.18

`v11.0.17`

Compare Source

`v11.0.16`

Compare Source

v11.0.16 (2025-04-11)

fix(common): use file-type to validate file mimetypes by @Chathula in https://github.com/nestjs/nest/pull/14881

`v11.0.15`

Compare Source

v11.0.15 (2025-04-10)

Bug fixes

platform-fastify
- #14935 fix(fastify): methods comparison (@johaven)

Committers: 1

Johan Legrand (@johaven)

`v11.0.14`

Compare Source

v11.0.14 (2025-04-09)

Bug fixes

platform-fastify
- #14511 fix(fastify): adds the non-standard http methods to the instance (@johaven)

Committers: 1

Johan Legrand (@johaven)

`v11.0.13`

Compare Source

v11.0.13 (2025-04-03)

Bug fixes

platform-fastify
- #14895 fix(fastify-adapter): global prefix exclusion path handling w/middleware (@KyleLilly)
microservices
- #14869 fix(microservices): do not re-create client connection once get client by service name (@mingo023)

Dependencies

platform-express
- #14883 fix(deps): update dependency express to v5.1.0 (@renovate[bot])
- #14817 fix(deps): update dependency multer to v1.4.5-lts.2 (@renovate[bot])
platform-fastify
- #14861 fix(deps): update dependency fastify to v5.2.2 (@renovate[bot])
- #14864 chore(deps): bump @fastify/cors from 11.0.0 to 11.0.1 (@dependabot[bot])

Committers: 2

Kyle Lilly (@KyleLilly)
Minh Ngo (@mingo023)

`v11.0.12`

Compare Source

v11.0.12 (2025-03-19)

Bug fixes

core
- #14803 fix(core): infinite loop on broken circular reference (@kamilmysliwiec)
- https://github.com/nestjs/nest/pull/14792 dependencies not resolving for request-scoped lazy providers (@anizozina)

Enhancements

core
- #14802 feat(core): add options to the legacy route converter (@kamilmysliwiec)

`v11.0.11`

Compare Source

v11.0.11 (2025-02-28)

Enhancements

platform-fastify
- #14677 perf: Switch deprecated parser querystring for fast-querystring (@smith558)

Dependencies

platform-fastify
- #14711 fix(deps): update dependency @fastify/cors to v11 (@renovate[bot])
platform-ws
- #14689 chore(deps): bump ws from 8.18.0 to 8.18.1 (@dependabot[bot])

Committers: 1

Stanislav (Stanley) Modrak (@smith558)

`v11.0.10`

Compare Source

v11.0.10 (2025-02-17)

Bug fixes

microservices
- #14605 fix(microservices): server send drops emitted value (@shprota)
platform-express
- https://github.com/nestjs/nest/pull/14640 fix(platform-express) respect custom parser middlewares in Express 5 (@luddwichr)

`v11.0.9`

Compare Source

v11.0.9 (2025-02-10)

Bug fixes

core
- #14597 perf(core): use topology tree for calculating distance (depth) (@kamilmysliwiec)
common
- #14579 fix(common): revert to original value (swc builders regression) (@kamilmysliwiec)

Committers: 2

Kamil Mysliwiec (@kamilmysliwiec)

`v11.0.8`

Compare Source

v11.0.8 (2025-02-06)

Bug fixes

common
- #14546 fix(common): addLeadingSlash optional group support (@dcharbonnier)
platform-express
- #14574 fix(platform-express) make check for existing middlewares work with Express 5 (@luddwichr)

Committers: 4

Ghassen Rjab (@GhassenRjab)
Shay Molcho (@shaymolcho)
@dcharbonnier
@luddwichr

`v11.0.7`

Compare Source

v11.0.7 (2025-01-31)

Bug fixes

core
- #14523 fix: middleware sort issues (@rbnayax)

Committers: 1

@rbnayax

`v11.0.6`

Compare Source

v11.0.6 (2025-01-27)

Bug fixes

core
- #14522 fix(core): allow optional named wildcard groups (@kamilmysliwiec)

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

`v11.0.5`

Compare Source

v11.0.5 (2025-01-23)

Bug fixes

core
- #14495 fix(core): global module middleware should be executed first (@kamilmysliwiec)

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

`v11.0.4`

Compare Source

`v11.0.3`

Compare Source

`v11.0.2`

Compare Source

`v11.0.1`

Compare Source

`v11.0.0`

Compare Source

v11.0.0 (2025-01-16)

Article: https://trilon.io/blog/announcing-nestjs-11-whats-new
Migration guide: https://docs.nestjs.com/migration-guide 👈 👈 👈

⚠️ Node v16 and v18 are no longer supported (>= v20 is required).

Features

common, core, microservices
- #14142 feat(microservices): add status, unwrap, on methods to microservice transporters (clients/servers) (@kamilmysliwiec)
- #14121 feat(common): add json logger, built-in logger improvements (@kamilmysliwiec)
common, core
- #13336 feat(core): introduce different module opaque key factories (improve bootstrap performance) (@kamilmysliwiec)
common, core, microservices, platform-express, platform-fastify, platform-socket.io, platform-ws, testing, websockets
- #14238 chore(deps): upgrade to express v5, fastify v5, add legacy route path converter to minimize breaking changes (@kamilmysliwiec)

Enhancements

common
- #14213 feat(common): add error messages for file validators (@mag123c)
- #14131 feat(common): allow passing number to http error createBody (@kamilmysliwiec)
- #14122 feat(common): add ParseDatePipe, add tsdoc to other pipes (@kamilmysliwiec)
- #12735 feat(common)!: type narrowing allowed injection tokens for @Inject() (@micalevisk)
- #12764 fix(common): apply options to plaintoclass in classserializerinterceptor (@kmw14641)
- #14126 fix(common): type narrowing context parameter on createParamDecorator's callback (@EeeasyCode)
- #13628 chore(class-transformer): plainToClass is deprectated and replaced with plainToInstance (@tomflorentin)
microservices
- #14200 feat(microservices): support nats queue per handler (@kamilmysliwiec)
- #13924 feat(microservices): add gracefull shutdown option for nats server (@alinowrouzii)
- #12622 feat: allow for microservice options to come from the di container (@jmcdo29)
- #14134 feat(microservices): add max tcp packet buffer length (@kamilmysliwiec)
- #12761 feat(microservices): ability to use a random port for the TCP server (@PieterScheffers)
websockets
- #14184 feat(websockets): include exception cause to associate error with req (@kamilmysliwiec)
common, core, microservices, websockets
- #14182 feat(common): introduce intrinsic exception (@kamilmysliwiec)
common, core, platform-fastify
- #13278 feat(core,common,platform-fastify): add webdav http methods support (@johaven)
platform-express
- #13407 feat: add multer error fieldname to the exception message (@mmgroner)
platform-ws
- #14127 feat(ws): introduce message parser for ws adapter (@CodyTseng)
platform-fastify
- #14115 chore(fastify): update fastify view options interface (@Tony133)
- #14116 refactor(fastify): update fastify static options interface (@Tony133)
common, core
- #14113 feat(core): allow overriding abortOnError for the select method (@kamilmysliwiec)

Bug fixes

core
- #14267 fix shutdown hooks order (@flovouin)
- #13388 correction of Reflector types (@AlexRMU)
- #14110 fix(core): Calculate module distance after bindGlobalScope (@wenlong-chen)
- #14111 fix(core): Order of module destroy should be the reverse of module init (@wenlong-chen)
- #14097 fix(core): revisit dependencies w/ possibly higher distance (@clkamp)
platform-fastify
- #13797 fix(fastify-adapter): middleware not executed when root path is excluded (@patrickacioli)
microservices
- #14129 fix: rabbitmq bindings and auto-generated queues (@EeeasyCode)
- #14112 fix(microservices): use instance refs for target handler callbacks (@kamilmysliwiec)
- #13468 fix(microservices): delete unnecessary call of grpcClient.start (@kamilmysliwiec)
common
- #14114 fix(common)!: drop broken support for promises on exports of modules (@micalevisk)

Other packages in the ecosystem

config (breaking changes)
- https://github.com/nestjs/config/releases/tag/4.0.0
cli
- https://github.com/nestjs/nest-cli/releases/tag/11.0.0
cache-manager (breaking changes)
- https://github.com/nestjs/cache-manager/releases/tag/3.0.0
cqrs
- https://github.com/nestjs/cqrs/releases/tag/11.0.0

Dependencies

Other
- #14205 chore(dev-deps): upgrade to eslint v9 (@kamilmysliwiec)
- #14428 fix(deps): update dependency mercurius to v16.0.1 (@renovate[bot])
- #14424 fix(deps): update dependency mongoose to v8.9.5 (@renovate[bot])
- #14410 fix(deps): update dependency @fastify/static to v8.0.4 (@renovate[bot])
- #14411 fix(deps): update dependency @fastify/view to v10.0.2 (@renovate[bot])
- #14403 chore(deps): update dependency nats to v2.29.1 (@renovate[bot])
- #14400 fix(deps): update dependency ansis to v3.8.1 (@renovate[bot])
- #14337 chore(deps): update dependency @fastify/multipart to v9.0.2 (@renovate[bot])
- #14415 fix(deps): update dependency mercurius to v16 (@renovate[bot])
- #14397 chore(deps): update dependency webpack-cli to v6 (@renovate[bot])
- #14384 fix(deps): update dependency typescript to v5.7.3 (@renovate[bot])
- #14378 chore(deps): update dependency core-js to v3.40.0 (@renovate[bot])
- #14377 chore(deps): update dependency @eslint/js to v9.17.0 (@renovate[bot])
- #14375 chore(deps): update dependency @grpc/grpc-js to v1.12.5 (@renovate[bot])
- #14370 chore(deps): update dependency ioredis to v5.4.2 (@renovate[bot])
- #14197 chore(deps-dev): bump @fastify/static from 7.0.4 to 8.0.3 (@dependabot[bot])
- #14345 chore(deps): update dependency eslint to v9 (@renovate[bot])
- #14324 fix(deps): update dependency @socket.io/redis-adapter to v8.3.0 (@renovate[bot])
- #14363 chore(deps): bump @fastify/cors from 9.0.1 to 10.0.2 (@dependabot[bot])
- #14354 chore(deps-dev): bump cache-manager from 5.7.6 to 6.3.2 (@dependabot[bot])
- #14021 chore(deps-dev): bump @fastify/view from 9.1.0 to 10.0.1 (@dependabot[bot])
- #14326 fix(deps): update dependency mongodb to v6.12.0 (@renovate[bot])
- #14307 fix(deps): update dependency @grpc/grpc-js to v1.12.4 (@renovate[bot])
platform-fastify
- #14402 fix(deps): update dependency @fastify/middie to v9.0.3 (@renovate[bot])
- #14401 fix(deps): update dependency @fastify/formbody to v8.0.2 (@renovate[bot])
- #14387 fix(deps): update dependency light-my-request to v6.5.1 (@renovate[bot])
- #13990 feat(platform-fastify): added support for Fastify v5 (@Tony133)

Committers: 22

Alex (@AlexRMU)
Ali Nowrouzi (@alinowrouzii)
Antonio Tripodi (@Tony133)
Christian Lütke-Stetzkamp (@clkamp)
Cody Tseng (@CodyTseng)
Flo (@flovouin)
Harel Danieli (@Hareloo)
Jackie McDoniel (@jmcdo29)
JaeHo Jang (@mag123c)
Johaven (@johaven)
Kamil Mysliwiec (@kamilmysliwiec)
Khan / 이창민 (@EeeasyCode)
Max Katz (@maxktz)
Mendel Groner (@mmgroner)
Micael Levi L. Cavalcante (@micalevisk)
Mitchell (@Mittcio)
Patrick Acioli (@patrickacioli)
Pieter Scheffers (@PieterScheffers)
@bestlyg
@kmw14641
@tomflorentin
@wenlong-chen

`v10.4.17`

Compare Source

`v10.4.16`

Compare Source

What's Changed

fix(common): introduce magic file type validator to nestjs common by @Chathula in https://github.com/nestjs/nest/pull/14948

Full Changelog: nestjs/nest@v10.4.15...v10.4.16

`v10.4.15`

Compare Source

v10.4.15 (2024-12-09)

Dependencies

platform-express
- #14282 fix(deps): update dependency express to v4.21.2 (@renovate[bot])

`v10.4.14`

Compare Source

`v10.4.13`

Compare Source

v10.4.13 (2024-12-03)

Bug fixes

common
- #14256 chore(common): Add type declaration for RawBody decorator with pipes (@sapenlei)

Dependencies

#14257 fix(deps): update dependency @fastify/static to v7.0.4 (@renovate[bot])
#14258 fix(deps): update dependency @nestjs/sequelize to v10.0.1 (@renovate[bot])
#14249 chore(deps): bump @apollo/gateway from 2.4.8 to 2.8.5 in /sample/32-graphql-federation-schema-first/users-application (@dependabot[bot])
#14250 chore(deps): update jest monorepo (@renovate[bot])
#14245 chore(deps): update dependency mqtt to v5.10.3 (@renovate[bot])
#14247 fix(deps): update nest monorepo to v10.4.12 (@renovate[bot])
#14251 chore(deps-dev): bump graphql-tools from 9.0.3 to 9.0.5 (@dependabot[bot])
#14246 chore(deps): update nest monorepo (@renovate[bot])

Committers: 3

Kamil Mysliwiec (@kamilmysliwiec)
Micael Levi L. Cavalcante (@micalevisk)
sapenlei (@sapenlei)

`v10.4.12`

Compare Source

v10.4.12 (2024-11-29)

Bug fixes

common
- #14241 fix(common): enforce string type in validationpipe (@LhonRafaat)

Dependencies

Other
- #14243 chore(deps): update dependency @types/node to v20.17.9 (@renovate[bot])
- #14240 chore(deps): update dependency @types/multer to v1.4.12 (@renovate[bot])
- #14239 chore(deps): update dependency @types/chai to v4.3.20 (@renovate[bot])
- #14237 chore(deps): update confluentinc/cp-zookeeper docker tag to v7.7.2 (@renovate[bot])
- #14236 chore(deps): update confluentinc/cp-kafka docker tag to v7.7.2 (@renovate[bot])
- #12253 fix(deps): update apollo graphql packages (@renovate[bot])
- #14235 chore(deps-dev): bump @commitlint/config-angular from 19.5.0 to 19.6.0 (@dependabot[bot])
- #14233 chore(deps): update nest monorepo (@renovate[bot])
- #14232 fix(deps): update dependency path-to-regexp to v3.3.0 [security] (@renovate[bot])
- #14229 chore(deps): update mongo docker tag to v8 (@renovate[bot])
- #14228 chore(deps): update dependency @types/node to v22.10.0 (@renovate[bot])
- #14227 fix(deps): update nest-graphql monorepo to v12.2.1 (@renovate[bot])
- #14224 fix(deps): update dependency sequelize to v6.37.5 (@renovate[bot])
- #14230 chore(deps): update mysql docker tag to v9 (@renovate[bot])
- #14231 fix(deps): update dependency @nestjs/swagger to v8 (@renovate[bot])
common, core, microservices, platform-express, platform-fastify, platform-socket.io, platform-ws, testing, websockets
- #14226 fix(deps): update dependency tslib to v2.8.1 (@renovate[bot])
platform-socket.io
- #14225 fix(deps): update dependency socket.io to v4.8.1 (@renovate[bot])

Committers: 1

Lhon (@LhonRafaat)

`v10.4.11`

Compare Source

`v10.4.10`

Compare Source

v10.4.10 (2024-11-27)

Bug fixes

platform-socket.io, websockets
- #14204 fix(websockets): ensure non-shared servers call close method (@sapenlei)

Dependencies

#14221 chore(deps): update mysql docker tag to v8.4.3 (@renovate[bot])
#14220 chore(deps): update dependency webpack to v5.96.1 (@renovate[bot])
#14219 chore(deps): update dependency nodemon to v3.1.7 (@renovate[bot])
#14218 chore(deps): update confluentinc/cp-zookeeper docker tag to v7.7.1 (@renovate[bot])
#14217 chore(deps): update confluentinc/cp-kafka docker tag to v7.7.1 (@renovate[bot])
#14216 fix(deps): update dependency rimraf to v5.0.10 (@renovate[bot])
#14215 fix(deps): update dependency dotenv to v16.4.5 (@renovate[bot])
#14214 fix(deps): update dependency @grpc/reflection to v1.0.4 (@renovate[bot])
#12940 fix(deps): update dependency mongoose to v8.8.3 (@renovate[bot])
#14207 chore(deps): update dependency @types/dotenv to v8.2.3 (@renovate[bot])
#14208 chore(deps): update dependency @types/node to v20.17.8 (@renovate[bot])
#14209 chore(deps): update dependency amqplib to v0.10.5 (@renovate[bot])
#14212 chore(deps): update dependency webpack to v5.94.0 [security] (@renovate[bot])
#14210 chore(deps): update dependency husky to v9.1.7 (@renovate[bot])
#14211 chore(deps): update nest monorepo (@renovate[bot])
#14206 chore(deps-dev): bump mongoose from 8.8.1 to 8.8.3 (@dependabot[bot])

Committers: 1

sapenlei (@sapenlei)

`v10.4.9`

Compare Source

v10.4.9 (2024-11-25)

Bug fixes

core, microservices
- #13923 fix(core): merge req context with tenant payload in the request instance (@DylanVeldra)
websockets
- #14185 fix(websockets): Prevent HTTP server early close in Socket.IO shutdown (@sapenlei)
common
- #14181 fix(common): fallback to empty string for enums when validating (swc builder) (@kamilmysliwiec)
core
- #13804 fix(core): dependencies not resolving for transient lazy providers (@patrickacioli)
microservices
- #14163 fix(microservices): grpc client streaming bugs (@kamilmysliwiec)

Enhancements

common, core
- #14175 fix(common,core): align the logic of optional provider (@micalevisk)
microservices
- #12954 feat: emit batch (@gunb0s)

Dependencies

Other
- #14192 chore(deps): update dependency webpack to v5.94.0 [security] (@renovate[bot])
- #14188 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/30-event-emitter (@dependabot[bot])
- #14187 chore(deps): bump cookie and @nestjs/platform-express in /sample/34-using-esm-packages (@dependabot[bot])
- #14189 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/19-auth-jwt (@dependabot[bot])
- #14186 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/31-graphql-federation-code-first/posts-application (@dependabot[bot])
- #14183 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/32-graphql-federation-schema-first/posts-application (@dependabot[bot])
- #14176 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/32-graphql-federation-schema-first/users-application (@dependabot[bot])
- #14179 chore(deps-dev): bump @types/mocha from 10.0.9 to 10.0.10 (@dependabot[bot])
- #14174 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/22-graphql-prisma (@dependabot[bot])
- #14173 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/28-sse (@dependabot[bot])
- #14165 chore(deps-dev): bump @typescript-eslint/parser from 8.14.0 to 8.15.0 (@dependabot[bot])
- #14171 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/11-swagger (@dependabot[bot])
- #14172 chore(deps): bump cookie and @nestjs/platform-express in /sample/35-use-esm-package-after-node22 (@dependabot[bot])
- #14170 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/24-serve-static (@dependabot[bot])
- #14169 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/15-mvc (@dependabot[bot])
- #14164 chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /sample/01-cats-app (@dependabot[bot])
- #14167 chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.14.0 to 8.15.0 (@dependabot[bot])
- #14161 chore(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /sample/25-dynamic-modules (@dependabot[bot])
- #14159 chore(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /sample/33-graphql-mercurius (@dependabot[bot])
- #13632 fix(deps): update dependency mysql2 to v3.9.8 [security] (@renovate[bot])
- #14151 chore(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /sample/27-scheduling (@dependabot[bot])
- #14155 build(sample): replace cli-color with smaller and faster ansis (@webdiscus)
- #14146 chore(deps): bump cookie and @nestjs/platform-express in /sample/28-sse (@dependabot[bot])
- #14149 chore(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /sample/32-graphql-federation-schema-first/gateway (@dependabot[bot])
- #12995 chore(deps): update dependency supertest to v6.3.4 (@renovate[bot])
- #12815 chore(deps): update dependency @types/node to v20.17.6 (@renovate[bot])
- #14147 chore: upgrade deps (@kamilmysliwiec)
- #14144 chore(deps): bump cookie, light-my-request and @nestjs/platform-fastify in /sample/33-graphql-mercurius (@dependabot[bot])
platform-fastify
- #14191 chore(deps): bump light-my-request from 6.1.0 to 6.3.0 (@dependabot[bot])

Committers: 7

Kamil Mysliwiec (@kamilmysliwiec)
Micael Levi L. Cavalcante (@micalevisk)
Patrick Acioli (@patrickacioli)
@DylanVeldra
@webdiscus
cain (@gunb0s)
sapenlei (@sapenlei)

`v10.4.8`

Compare Source

v10.4.8 (2024-11-15)

Bug fixes

microservices
- #14059 fix(microservices): include discarded rmq client options (@v-sum)
- #14132 fix(microservices): no messages emitted with mqtt when qos set (@kamilmysliwiec)
core
- #14133 fix(core): flaky durable provider, remove instance on error (@kamilmysliwiec)

Enhancements

core
- #14143 feat(core): expose listening stream from http adapter host (@kamilmysliwiec)
- #14139 chore(core): defer application shutdown until init finishes (@mksony)

Committers: 3

Kamil Mysliwiec (@kamilmysliwiec)
Max (@mksony)
Vasile Sumanschi (@v-sum)

`v10.4.7`

Compare Source

`v10.4.6`

Compare Source

`v10.4.5`

Compare Source

v10.4.5 (2024-10-16)

Dependencies

platform-express
- #14060 build(express): upgrade to express 4.2.1 (@ezintz)
Other
- #13903 chore(deps): bump ws and @nestjs/graphql in /sample/31-graphql-federation-code-first/posts-application (@dependabot[bot])
- #13917 chore(deps): bump micromatch from 4.0.4 to 4.0.8 in /sample/32-graphql-federation-schema-first/posts-application (@dependabot[bot])
- #14015 chore(deps): bump find-my-way from 8.1.0 to 8.2.2 in /sample/10-fastify (@dependabot[bot])
- #14039 chore(deps): bump serve-static, express and @nestjs/platform-express in /sample/23-graphql-code-first (@dependabot[bot])
- #14040 chore(deps): bump send, @nestjs/platform-express and express in /sample/24-serve-static (@dependabot[bot])
- #14034 chore(deps): bump serve-static and @nestjs/platform-express in /sample/28-sse (@dependabot[bot])
- #14035 chore(deps): bump send and @nestjs/platform-express in /sample/28-sse (@dependabot[bot])
- #14030 chore(deps): bump send and @nestjs/platform-express in /sample/25-dynamic-modules (@dependabot[bot])
- #14031 chore(deps): bump serve-static and @nestjs/platform-express in /sample/25-dynamic-modules (@dependabot[bot])
- #14026 chore(deps): bump serve-static and @nestjs/platform-express in /sample/26-queues (@dependabot[bot])
- #14025 chore(deps): bump send and @nestjs/platform-express in /sample/26-queues (@dependabot[bot])
platform-fastify
- #14064 build(fastify): upgrade light-my-request to 6.1.0 (@PattyTrish)

Committers: 5

Eduard Zintz (@ezintz)
Fernando Vargas (@frndvrgs)
Micael Levi L. Cavalcante (@micalevisk)
Patricia Ahern (@PattyTrish)
Rick Dutour Geerling (@tuxmachine)

`v10.4.4`

Compare Source

`v10.4.3`

Compare Source

`v10.4.2`

Compare Source

v10.4.2 (2024-09-16)

Dependencies

common, core, microservices, platform-express, platform-fastify, platform-socket.io, platform-ws, testing, websockets
- #13911 chore(deps): bump tslib from 2.6.3 to 2.7.0 (@dependabot[bot])
platform-fastify
- #13938 chore(deps): bump light-my-request from 5.13.0 to 6.0.0 (@dependabot[bot])
Other
- #13936 chore(deps-dev): bump lint-staged from 15.2.9 to 15.2.10 (@dependabot[bot])
- #13946 chore(deps): bump webpack and @nestjs/cli in /sample/02-gateways ([@dependabot[bot

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from c19d51b to bca4d21 Compare April 28, 2025 16:28

renovate bot changed the title ~~fix(deps): update dependency @nestjs/common to v10 [security]~~ fix(deps): update dependency @nestjs/common [security] Apr 28, 2025

renovate bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from bca4d21 to 14d14db Compare April 28, 2025 23:58

renovate bot changed the title ~~fix(deps): update dependency @nestjs/common [security]~~ fix(deps): update dependency @nestjs/common to v10 [security] Apr 28, 2025

fix(deps): update dependency @nestjs/common [security]

aa3bd3a

renovate bot force-pushed the renovate/npm-nestjs-common-vulnerability branch from 14d14db to aa3bd3a Compare May 4, 2025 14:13

renovate bot changed the title ~~fix(deps): update dependency @nestjs/common to v10 [security]~~ fix(deps): update dependency @nestjs/common [security] May 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency @nestjs/common [security] #1342

fix(deps): update dependency @nestjs/common [security] #1342

renovate bot commented Apr 25, 2025 •

edited

Loading

fix(deps): update dependency @nestjs/common [security] #1342

Are you sure you want to change the base?

fix(deps): update dependency @nestjs/common [security] #1342

Conversation

renovate bot commented Apr 25, 2025 • edited Loading

GitHub Vulnerability Alerts

Release Notes

What's Changed

New Contributors

What's Changed

v11.0.16 (2025-04-11)

v11.0.15 (2025-04-10)

Bug fixes

Committers: 1

v11.0.14 (2025-04-09)

Bug fixes

Committers: 1

v11.0.13 (2025-04-03)

Bug fixes

Dependencies

Committers: 2

v11.0.12 (2025-03-19)

Bug fixes

Enhancements

v11.0.11 (2025-02-28)

Enhancements

Dependencies

Committers: 1

v11.0.10 (2025-02-17)

Bug fixes

v11.0.9 (2025-02-10)

Bug fixes

Committers: 2

v11.0.8 (2025-02-06)

Bug fixes

Committers: 4

v11.0.7 (2025-01-31)

Bug fixes

Committers: 1

v11.0.6 (2025-01-27)

Bug fixes

Committers: 1

v11.0.5 (2025-01-23)

Bug fixes

Committers: 1

v11.0.0 (2025-01-16)

Features

Enhancements

Bug fixes

Other packages in the ecosystem

Dependencies

Committers: 22

What's Changed

v10.4.15 (2024-12-09)

Dependencies

v10.4.13 (2024-12-03)

Bug fixes

Dependencies

Committers: 3

v10.4.12 (2024-11-29)

Bug fixes

Dependencies

Committers: 1

v10.4.10 (2024-11-27)

Bug fixes

Dependencies

Committers: 1

v10.4.9 (2024-11-25)

Bug fixes

Enhancements

Dependencies

Committers: 7

v10.4.8 (2024-11-15)

Bug fixes

Enhancements

Committers: 3

v10.4.5 (2024-10-16)

Dependencies

Committers: 5

v10.4.2 (2024-09-16)

renovate bot commented Apr 25, 2025 •

edited

Loading