Skip to content
This repository was archived by the owner on Jul 21, 2026. It is now read-only.

chore(deps): bump the nestjs group across 1 directory with 5 updates - #246

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/nestjs-832e47bac0
Open

chore(deps): bump the nestjs group across 1 directory with 5 updates#246
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/nestjs-832e47bac0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the nestjs group with 4 updates in the / directory: @nestjs/common, @nestjs/core, @nestjs/platform-fastify and @nestjs/cli.

Updates @nestjs/common from 11.1.12 to 11.1.28

Release notes

Sourced from @​nestjs/common's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • a5e86d8 fix(common): Add missing exception classes to HttpErrorByCode
  • 660a124 chore(release): publish v11.1.27 release
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 02f8041 chore(release): publish v11.1.25 release
  • 1634915 test(common): Add unit tests for cli-colors utility
  • 380bf5c Merge pull request #17058 from Se3do/test/extend-metadata
  • af4542b test(common): Add unit tests for assignCustomParameterMetadata
  • b67aea1 test(common): Add unit tests for extendArrayMetadata
  • Additional commits viewable in compare view

Updates @nestjs/core from 11.1.12 to 11.1.28

Release notes

Sourced from @​nestjs/core's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • 053a316 Merge pull request #17239 from jyx-07/fix/sse-interceptor-teardown
  • 8e7a2ee feat(core): include auto-converted route in legacy route path warning
  • c5b7164 fix(core): trigger sse observable teardown on disconnect
  • 660a124 chore(release): publish v11.1.27 release
  • 5c5e9ba fix(core): sse async handlers teardown issue #17128
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 0f398fd test: fix broken unit test
  • d152eec fix(core): post sse endpoint empty response #17098
  • Additional commits viewable in compare view

Updates @nestjs/platform-fastify from 11.1.12 to 11.1.28

Release notes

Sourced from @​nestjs/platform-fastify's releases.

v11.1.28 (2026-07-08)

Bug fixes

  • core
    • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
  • common
    • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
  • websockets
    • #17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

  • core
    • #17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

Committers: 4

v11.1.27

What's Changed

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

New Contributors

... (truncated)

Commits
  • dfaa376 chore(release): publish v11.1.28 release
  • e492fa7 chore(deps): bump fastify from 5.8.5 to 5.10.0
  • 660a124 chore(release): publish v11.1.27 release
  • 8520642 Merge pull request #17138 from nestjs/fix/for-routes-fastify-middleware
  • 2f286d8 fix(platform-fastify): middleware ending slash #17094
  • 05205f7 fix(deps): update dependency @​fastify/view to v12
  • 86e617a chore(deps): bump fastify-plugin from 5.1.0 to 6.0.0
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 02f8041 chore(release): publish v11.1.25 release
  • Additional commits viewable in compare view

Updates @nestjs/cli from 11.0.16 to 11.0.24

Release notes

Sourced from @​nestjs/cli's releases.

Release 11.0.24

  • fix(compiler): fail fast when typescript lacks the programmatic api (3c6b4ac4)
  • refactor: move available languages closer to first usage (1697b7fd)
  • refactor: delete unused gulp tool utility helper file (75b57c4e)
  • fix(runners): remove duplicated binary in failed command message (54b08ae0)

Release 11.0.23

  • Revert "fix(compiler): validate delete out dir paths before rm" (0dd0e3ef)
  • Revert "fix(compiler): validate asset output paths" (728f80cf)

Release 11.0.22

  • fix(cli): resolve Windows path separator bug in plugin loader (9e502bda)
  • fix(compiler): validate asset output paths (c4342b2c)
  • fix: Update CRUD option to accept a value for generating entry points (4c0e2cab)
  • feat: Add type and CRUD options in generate command (b19856a3)

Release 11.0.21

Release 11.0.20

  • fix: revert #3313 due to #3391 and #3390 (705bb7da)
  • chore(deps): update swc monorepo (8496c768)
  • fix(assets-manager): return promise from close watchers (2181947d)
  • fix(swc): fix inverted chokidar ignored filter in watch mode (a3890cba)
  • fix: add type annotations to caught errors (c46ddd71)

Release 11.0.19

What's Changed

Full Changelog: nestjs/nest-cli@11.0.18...11.0.19

11.0.18

What's Changed

... (truncated)

Commits
  • c8a68da chore(): release v11.0.24
  • e5fda8c Merge pull request #3478 from ruban-s/fix/typescript-7-unsupported-api
  • 3c6b4ac fix(compiler): fail fast when typescript lacks the programmatic api
  • de85434 Merge pull request #3475 from abdulganiyy/refactor/move-languages-variable-cl...
  • 1697b7f refactor: move available languages closer to first usage
  • 2705bd4 Merge pull request #3472 from abdulganiyy/delete-unused-helper-file
  • 75b57c4 refactor: delete unused gulp tool utility helper file
  • c2aefdf Merge pull request #3469 from iamkanguk97/fix/runner-duplicated-binary
  • 54b08ae fix(runners): remove duplicated binary in failed command message
  • 731a09b chore(): release v11.0.23
  • Additional commits viewable in compare view

Updates @nestjs/schematics from 11.0.9 to 11.1.0

Release notes

Sourced from @​nestjs/schematics's releases.

Release 11.1.0

What's Changed

New Contributors

Full Changelog: nestjs/schematics@11.0.10...11.1.0

11.0.10

What's Changed

New Contributors

Full Changelog: nestjs/schematics@11.0.9...11.0.10

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 29, 2026
@socket-security

socket-security Bot commented Jun 29, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​nestjs/​cli@​11.0.24991008695100
Added@​nestjs/​common@​11.1.2810010010095100
Added@​nestjs/​core@​11.1.289910010095100
Added@​nestjs/​platform-fastify@​11.1.289910010097100

View full report

@socket-security

socket-security Bot commented Jun 29, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm strtok3 is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@nestjs/common@11.1.28npm/strtok3@10.3.5

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/strtok3@10.3.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm webpack is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: pnpm-lock.yamlnpm/@nestjs/cli@11.0.24npm/webpack@5.106.2

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/webpack@5.106.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Bumps the nestjs group with 4 updates in the / directory: [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common), [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core), [@nestjs/platform-fastify](https://github.com/nestjs/nest/tree/HEAD/packages/platform-fastify) and [@nestjs/cli](https://github.com/nestjs/nest-cli).


Updates `@nestjs/common` from 11.1.12 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/common)

Updates `@nestjs/core` from 11.1.12 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/core)

Updates `@nestjs/platform-fastify` from 11.1.12 to 11.1.28
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.28/packages/platform-fastify)

Updates `@nestjs/cli` from 11.0.16 to 11.0.24
- [Release notes](https://github.com/nestjs/nest-cli/releases)
- [Commits](nestjs/nest-cli@11.0.16...11.0.24)

Updates `@nestjs/schematics` from 11.0.9 to 11.1.0
- [Release notes](https://github.com/nestjs/schematics/releases)
- [Commits](nestjs/schematics@11.0.9...11.1.0)

---
updated-dependencies:
- dependency-name: "@nestjs/cli"
  dependency-version: 11.0.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: nestjs
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nestjs
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nestjs
- dependency-name: "@nestjs/platform-fastify"
  dependency-version: 11.1.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nestjs
- dependency-name: "@nestjs/schematics"
  dependency-version: 11.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: nestjs
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the nestjs group with 5 updates chore(deps): bump the nestjs group across 1 directory with 5 updates Jul 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nestjs-832e47bac0 branch from 4723491 to 99a2a0f Compare July 21, 2026 07:10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants