chore(deps/backend): bump the nestjs group in /backend with 5 updates by dependabot[bot] · Pull Request #849 · UnityChainxx/StellarHunts

dependabot · 2026-10-21T09:15:05Z

Bumps the nestjs group in /backend with 5 updates:

Package	From	To
@nestjs/config	`12.0.0`	`12.0.1`
@nestjs/jwt	`12.0.1`	`12.0.3`
@nestjs/platform-express	`12.0.4`	`11.2.7`
@nestjs/platform-socket.io	`11.0.12`	`11.2.7`
@nestjs/schedule	`12.0.1`	`12.0.2`

Updates @nestjs/config from 12.0.0 to 12.0.1

Release notes

Sourced from @nestjs/config's releases.

Release 12.0.1

What's Changed

fix(config): prevent prefix corruption and escape propertyPath in updateInterpolatedEnv by @Asadshah7950 in nestjs/config#2427

fix(deps): update dependency dotenv to v18.0.3 by @renovate[bot] in nestjs/config#2444

New Contributors

@Asadshah7950 made their first contribution in nestjs/config#2427

Full Changelog: nestjs/config@12.0.0...12.0.1

Commits

2785b5f chore(): release v12.0.1
0c0a0d6 fix(deps): update dependency dotenv to v18.0.3 (#2444)
130ee69 fix(deps): update dependency es-toolkit to v1.52.0 (#2411)
ab84892 chore(deps): update node.js to v24.21.0 (#2420)
d71b4a8 fix(config): prevent prefix corruption and escape propertyPath in updateInter...
498b207 fix(deps): update dependency dotenv to v18 (#2437)
c32556f chore(deps): update dependency oxlint to v1.85.0 (#2443)
58af4ad chore(deps): update nest monorepo to v12.0.4 (#2442)
56fdf53 chore(deps): update commitlint monorepo to v21.2.3 (#2441)
73353eb chore(deps): update dependency @types/node to v24.13.6 (#2440)
Additional commits viewable in compare view

Updates @nestjs/jwt from 12.0.1 to 12.0.3

Release notes

Sourced from @nestjs/jwt's releases.

Release 12.0.3

What's Changed

fix(jwt): reject async sign when the secret provider rejects by @thekhegay in nestjs/jwt#2294

fix(jwt): suppress async provider rejection on string payload error by @thekhegay in nestjs/jwt#2295

New Contributors

@thekhegay made their first contribution in nestjs/jwt#2294

Full Changelog: nestjs/jwt@12.0.2...12.0.3

Release 12.0.2

What's Changed

fix(jwt): add type overloads for decode with complete option and nullable return by @Asadshah7950 in nestjs/jwt#2269

New Contributors

@Asadshah7950 made their first contribution in nestjs/jwt#2269

Full Changelog: nestjs/jwt@12.0.1...12.0.2

Commits

1b8f652 chore(): release v12.0.3
99ac1f9 fix(jwt): suppress async provider rejection on string payload error (#2295)
96bfd75 chore(deps): update nest monorepo to v12.1.2 (#2289)
b74a723 chore(deps): update dependency @types/node to v24.19.2 (#2290)
41ac94b chore(deps): update dependency oxlint to v1.87.0 (#2291)
19b1466 chore(deps): update dependency release-it to v21.1.1 (#2292)
d399c15 chore(deps): update dependency prettier to v3.9.10 (#2293)
61c5e94 ci(): upgrade circleci config to version 2.1 (#2296)
1801d4d Merge pull request #2294 from thekhegay/fix/sign-async-secret-provider-reject
d995c2f fix(jwt): reject async sign when the secret provider rejects
Additional commits viewable in compare view

Updates @nestjs/platform-express from 12.0.4 to 11.2.7

Commits

c666d7f v11.2.7
c07cfb0 v11.2.6
fb8ecdb fix(deps): update dependency multer to v2.4.0 [security]
58c3634 fix(express): map multer errors by code instead of message
e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
02f8041 chore(release): publish v11.1.25 release
d8a0ab8 chore(release): publish v11.1.24 release
Additional commits viewable in compare view

Updates @nestjs/platform-socket.io from 11.0.12 to 11.2.7

Release notes

Sourced from @nestjs/platform-socket.io's releases.

v11.2.6

What's changed

@nestjs/platform-express

fix(deps): update dependency multer to v2.4.0 [security] — fixes CVE-2026-88932 (GHSA-3pph-fpjx-jg34)

fix(express): map multer errors by code instead of message — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

... (truncated)

Commits

c666d7f v11.2.7
8bd644e fix(websockets): keep the message stream alive when a handler throws
2618406 fix(websockets): stop unserializable replies from crashing the process
c07cfb0 v11.2.6
e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
Additional commits viewable in compare view

Updates @nestjs/schedule from 12.0.1 to 12.0.2

Release notes

Sourced from @nestjs/schedule's releases.

Release 12.0.2

feat(scheduler): add generic return type parameter to getInterval and getTimeout (a178f1b)

fix(cron): do not resurrect a deleted job after its initialDelay elapses (4473390)

Commits

1de04b0 chore(): release v12.0.2
4090c9e Merge pull request #2356 from nestjs/renovate/cimg-node-24.x
680c949 Merge pull request #2359 from Asadshah7950/feat/scheduler-generic-interval-ti...
cdbaa32 Merge pull request #2344 from chuanghiduoc/fix/cron-initial-delay-resurrection
a178f1b feat(scheduler): add generic return type parameter to getInterval and getTimeout
7a7ecdd chore(deps): update dependency vite to v8.3.0 (#2358)
77fc72b chore(deps): update dependency lint-staged to v17.5.1 (#2357)
80eec9d chore(deps): update dependency @types/node to v24.13.4 (#2355)
63ed7b8 chore(deps): update node.js to v24.21.0
0ea711b chore(deps): update dependency oxlint to v1.82.0 (#2354)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the nestjs group in /backend with 5 updates: | Package | From | To | | --- | --- | --- | | [@nestjs/config](https://github.com/nestjs/config) | `12.0.0` | `12.0.1` | | [@nestjs/jwt](https://github.com/nestjs/jwt) | `12.0.1` | `12.0.3` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `12.0.4` | `11.2.7` | | [@nestjs/platform-socket.io](https://github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io) | `11.0.12` | `11.2.7` | | [@nestjs/schedule](https://github.com/nestjs/schedule) | `12.0.1` | `12.0.2` | Updates `@nestjs/config` from 12.0.0 to 12.0.1 - [Release notes](https://github.com/nestjs/config/releases) - [Commits](nestjs/config@12.0.0...12.0.1) Updates `@nestjs/jwt` from 12.0.1 to 12.0.3 - [Release notes](https://github.com/nestjs/jwt/releases) - [Commits](nestjs/jwt@12.0.1...12.0.3) Updates `@nestjs/platform-express` from 12.0.4 to 11.2.7 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/platform-express) Updates `@nestjs/platform-socket.io` from 11.0.12 to 11.2.7 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/platform-socket.io) Updates `@nestjs/schedule` from 12.0.1 to 12.0.2 - [Release notes](https://github.com/nestjs/schedule/releases) - [Commits](nestjs/schedule@12.0.1...12.0.2) --- updated-dependencies: - dependency-name: "@nestjs/config" dependency-version: 12.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nestjs - dependency-name: "@nestjs/jwt" dependency-version: 12.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nestjs - dependency-name: "@nestjs/platform-express" dependency-version: 11.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/platform-socket.io" dependency-version: 11.2.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nestjs - dependency-name: "@nestjs/schedule" dependency-version: 12.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nestjs ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-21T09:15:08Z

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-10-21T09:20:47Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dzekojohn4 closed this Oct 21, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/backend/nestjs-eda3c8dd4c branch October 21, 2026 09:20

Navigation Menu

Repository navigation

chore(deps/backend): bump the nestjs group in /backend with 5 updates - #849

chore(deps/backend): bump the nestjs group in /backend with 5 updates#849
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/nestjs-eda3c8dd4c

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026

Release 12.0.1

What's Changed

New Contributors

Release 12.0.3

What's Changed

New Contributors

Release 12.0.2

What's Changed

New Contributors

v11.2.6

What's changed

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.1

What's Changed

v11.2.0

What's Changed

Release 12.0.2

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Labels

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant