chore(deps)(deps): Bump the nest-stack group across 1 directory with 5 updates by dependabot[bot] · Pull Request #139 · nest-native/reference-app

dependabot · 2026-10-17T17:58:33Z

Bumps the nest-stack group with 5 updates in the / directory:

Package	From	To
@nestjs/common	`11.2.3`	`12.2.0`
@nestjs/core	`11.2.3`	`12.2.0`
@nestjs/platform-express	`11.2.3`	`12.2.0`
drizzle-orm	`0.45.3`	`0.45.4`
zod	`4.6.5`	`4.6.7`

Updates @nestjs/common from 11.2.3 to 12.2.0

Release notes

Sourced from @nestjs/common's releases.

v12.2.0 (2026-10-19)

Notable changes

New options

@Sse({ maxPendingDataLength }) sets how many characters of event data may wait for a client that is not reading its events (4M by default; 0 or Infinity lifts the limit) – 2f05ad954e

IoAdapter and WsAdapter take maxConcurrentMessages, the number of a client's messages handled at once (1000 by default; Infinity lifts it) – 0bd0810ed7

ValidationPipe takes maxErrorMessagesLength (1,000,000 characters by default); messages past it are replaced by a "Further validation errors were omitted" entry – 086c1c514f

Kafka: parser.maxMessageSize (16 MiB after decompression by default); larger messages are logged and skipped – 9bdf844fca

TCP server: drainTimeout (30 s by default, 0 disables) disconnects a peer that leaves its responses unread – 583d6077ad

MQTT server: reconnectOnConnackError is now enabled by default, so a refused connection attempt is retried; set it to false for the previous behaviour – a63cea600a

HttpServer.getRouteMatchingOptions(), an optional adapter hook that tells core how the router matches paths (see "Middleware exclusions" below) – 08d8677c8d

New defaults and behaviour changes

@nestjs/platform-express, @nestjs/platform-fastify: fieldNestingDepth and fieldArrayIndexLimit (#18074) now default to 32 and 1000; set them to Infinity to lift the limits – 94fcc93770

ValidationPipe validates with validationError.target: false unless the options set it, so an exceptionFactory that reads error.target gets undefined; set validationError.target to true for the old errors – 8c5a59bf63

ValidationPipe answers an array or a primitive sent for a validated class with a 400 – 197371c1f3

FileTypeValidator matches a string fileType up to the end of a name (e.g. font/woff no longer accepts font/woff2; use a RegExp for that) – 770c6f1a19

@SerializeOptions({}) on a handler no longer turns off the class schema – d27cb7017f

BaseExceptionFilter answers http-errors errors created with expose: false (the default from 500) with the standard reason phrase instead of their message – 9ed572f853

A StreamableFile error still gets a 400, but the body no longer carries the error message – 2f28d91afb

Files uploaded with a request that a pipe rejected are removed from storage – acb98de89e

@nestjs/platform-fastify: a route with fileSize: undefined (or null) falls back to the plugin's limit; set it to Infinity to keep uploads unlimited – dd549e1a74

@nestjs/platform-express: object error bodies are sent as application/json on routes with a non-JSON Content-Type – 7dc6e349d5

ConsoleLogger in JSON mode cuts a record short past about a million characters – ad4915eaa3

A global enhancer that the injector failed to instantiate now fails the application at startup – ae78524ced

A request- or transient-scoped APP_FILTER now logs a startup warning, as it only applies to exceptions thrown from controllers – df5275c5e1

Microservices: a pattern key longer than 256 characters matches no handler – accd27e66c

Kafka: a message may carry up to 10,000 header values (e419ff540b); headers given as a string or array are not sent (312777743f); reply headers are decoded as text (ee94f6aaae)

gRPC: request streams are paused while their replies wait to be written – 37e5cf7706

Deprecation: on TCP, Redis, NATS, MQTT and RabbitMQ, an @EventPattern() handler that replies to ClientProxy#send() now logs a deprecation warning. The reply is unchanged; in the next major version event handlers will not reply to send(), as on Kafka already – ba3668d36b

Middleware exclusions

MiddlewareConsumer.exclude() now compiles excluded routes with the router's case and trailing-slash matching (08d8677c8d). Update @nestjs/core together with @nestjs/platform-express / @nestjs/platform-fastify: with an adapter that does not implement getRouteMatchingOptions(), excluded routes are matched exactly (f5aa875e40), so on a lenient router other spellings of an excluded path run the middleware.

With header, media type or custom versioning, exclude({ path, method, version }) and enableCsrfProtection({ exclude }) apply only to requests that ask for one of the excluded versions – 1a7a31fa46

@nestjs/platform-fastify: the request hook used by enableCsrfProtection() and useSecurityHeaders() now runs before Nest and app.use() middleware with NestFactory.create() too, including middleware registered before either call, as it already did with Test.createNestApplication() – 8351806290

Bug fixes

platform-fastify

614d1ac7ea fix(fastify): send the status of an exception whose body is an error (@kamilmysliwiec)

8b420f788f fix(fastify): apply middleware to plugins registered before init (@kamilmysliwiec)

#18175 fix(fastify): keep raw-response cookies in the header helpers (@johnnyhuirilef)

c215fd9b4f fix(fastify): match middleware paths like a case-insensitive router (@kamilmysliwiec)

43d4420205 fix(fastify): pass version extractor errors to the error handler (@kamilmysliwiec)

1435ed22f4 fix(fastify): pass middleware rejections to the error handler (@kamilmysliwiec)

84c947faf9 fix(fastify): stop reading a streamable file for a head request (@kamilmysliwiec)

dd549e1a74 fix(fastify): let undefined upload limits fall back to the defaults (@kamilmysliwiec)

4735f8d050 fix(fastify): free memory storage chunks once a file is buffered (@kamilmysliwiec)

3e3e6eea6f fix(fastify): remove uploads cut off after their last chunk (@kamilmysliwiec)

c04a9182b9 fix(fastify): set the security headers on router error responses (@kamilmysliwiec)

... (truncated)

Commits

af37111 chore(release): publish v12.2.0 release
770c6f1 fix(common): match a file type string up to the end of a name
8c5a59b fix(common): stop exposing the validated object on validation errors
086c1c5 fix(common): limit the length of validation error messages by default
e77ceba fix(common): stop copying nested validation errors for each level
197371c fix(common): reject arrays and primitives for validated classes
b34a359 fix(common): validate parsed array items one at a time
1a7a31f fix(core,common): exclude a version only for requests that ask for it
2f05ad9 fix(core): make the sse pending data limit configurable
2f28d91 fix(common): keep StreamableFile error messages out of responses
Additional commits viewable in compare view

Updates @nestjs/core from 11.2.3 to 12.2.0

Release notes

Sourced from @nestjs/core's releases.

v12.2.0 (2026-10-19)

Notable changes

New options

@Sse({ maxPendingDataLength }) sets how many characters of event data may wait for a client that is not reading its events (4M by default; 0 or Infinity lifts the limit) – 2f05ad954e

IoAdapter and WsAdapter take maxConcurrentMessages, the number of a client's messages handled at once (1000 by default; Infinity lifts it) – 0bd0810ed7

ValidationPipe takes maxErrorMessagesLength (1,000,000 characters by default); messages past it are replaced by a "Further validation errors were omitted" entry – 086c1c514f

Kafka: parser.maxMessageSize (16 MiB after decompression by default); larger messages are logged and skipped – 9bdf844fca

TCP server: drainTimeout (30 s by default, 0 disables) disconnects a peer that leaves its responses unread – 583d6077ad

MQTT server: reconnectOnConnackError is now enabled by default, so a refused connection attempt is retried; set it to false for the previous behaviour – a63cea600a

HttpServer.getRouteMatchingOptions(), an optional adapter hook that tells core how the router matches paths (see "Middleware exclusions" below) – 08d8677c8d

New defaults and behaviour changes

@nestjs/platform-express, @nestjs/platform-fastify: fieldNestingDepth and fieldArrayIndexLimit (#18074) now default to 32 and 1000; set them to Infinity to lift the limits – 94fcc93770

ValidationPipe validates with validationError.target: false unless the options set it, so an exceptionFactory that reads error.target gets undefined; set validationError.target to true for the old errors – 8c5a59bf63

ValidationPipe answers an array or a primitive sent for a validated class with a 400 – 197371c1f3

FileTypeValidator matches a string fileType up to the end of a name (e.g. font/woff no longer accepts font/woff2; use a RegExp for that) – 770c6f1a19

@SerializeOptions({}) on a handler no longer turns off the class schema – d27cb7017f

BaseExceptionFilter answers http-errors errors created with expose: false (the default from 500) with the standard reason phrase instead of their message – 9ed572f853

A StreamableFile error still gets a 400, but the body no longer carries the error message – 2f28d91afb

Files uploaded with a request that a pipe rejected are removed from storage – acb98de89e

@nestjs/platform-fastify: a route with fileSize: undefined (or null) falls back to the plugin's limit; set it to Infinity to keep uploads unlimited – dd549e1a74

@nestjs/platform-express: object error bodies are sent as application/json on routes with a non-JSON Content-Type – 7dc6e349d5

ConsoleLogger in JSON mode cuts a record short past about a million characters – ad4915eaa3

A global enhancer that the injector failed to instantiate now fails the application at startup – ae78524ced

A request- or transient-scoped APP_FILTER now logs a startup warning, as it only applies to exceptions thrown from controllers – df5275c5e1

Microservices: a pattern key longer than 256 characters matches no handler – accd27e66c

Kafka: a message may carry up to 10,000 header values (e419ff540b); headers given as a string or array are not sent (312777743f); reply headers are decoded as text (ee94f6aaae)

gRPC: request streams are paused while their replies wait to be written – 37e5cf7706

Deprecation: on TCP, Redis, NATS, MQTT and RabbitMQ, an @EventPattern() handler that replies to ClientProxy#send() now logs a deprecation warning. The reply is unchanged; in the next major version event handlers will not reply to send(), as on Kafka already – ba3668d36b

Middleware exclusions

MiddlewareConsumer.exclude() now compiles excluded routes with the router's case and trailing-slash matching (08d8677c8d). Update @nestjs/core together with @nestjs/platform-express / @nestjs/platform-fastify: with an adapter that does not implement getRouteMatchingOptions(), excluded routes are matched exactly (f5aa875e40), so on a lenient router other spellings of an excluded path run the middleware.

With header, media type or custom versioning, exclude({ path, method, version }) and enableCsrfProtection({ exclude }) apply only to requests that ask for one of the excluded versions – 1a7a31fa46

@nestjs/platform-fastify: the request hook used by enableCsrfProtection() and useSecurityHeaders() now runs before Nest and app.use() middleware with NestFactory.create() too, including middleware registered before either call, as it already did with Test.createNestApplication() – 8351806290

Bug fixes

platform-fastify

614d1ac7ea fix(fastify): send the status of an exception whose body is an error (@kamilmysliwiec)

8b420f788f fix(fastify): apply middleware to plugins registered before init (@kamilmysliwiec)

#18175 fix(fastify): keep raw-response cookies in the header helpers (@johnnyhuirilef)

c215fd9b4f fix(fastify): match middleware paths like a case-insensitive router (@kamilmysliwiec)

43d4420205 fix(fastify): pass version extractor errors to the error handler (@kamilmysliwiec)

1435ed22f4 fix(fastify): pass middleware rejections to the error handler (@kamilmysliwiec)

84c947faf9 fix(fastify): stop reading a streamable file for a head request (@kamilmysliwiec)

dd549e1a74 fix(fastify): let undefined upload limits fall back to the defaults (@kamilmysliwiec)

4735f8d050 fix(fastify): free memory storage chunks once a file is buffered (@kamilmysliwiec)

3e3e6eea6f fix(fastify): remove uploads cut off after their last chunk (@kamilmysliwiec)

c04a9182b9 fix(fastify): set the security headers on router error responses (@kamilmysliwiec)

... (truncated)

Commits

af37111 chore(release): publish v12.2.0 release
85d0a0b fix(core): run interceptor, pipe and filter classes without a name
8a53d08 fix(core): detect cycles in request-scoped forward references (#18186)
92136a6 fix(core): give a module that extends another module its own id (#18180)
bafce3b fix(core): answer http requests an rpc exception filter leaves
8f9fbfd fix(core): settle async param decorator values before pipes run
9b77f56 fix(core,microservices): let only the hybrid application bind gateways
fec478e fix(core): subscribe to guard observables from other copies of rxjs
034ef09 fix(core): run guards bound as classes without a name
a190887 fix(core,websockets): run transient enhancers bound to static gateways
Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.2.3 to 12.2.0

Release notes

Sourced from @nestjs/platform-express's releases.

v12.2.0 (2026-10-19)

Notable changes

New options

@Sse({ maxPendingDataLength }) sets how many characters of event data may wait for a client that is not reading its events (4M by default; 0 or Infinity lifts the limit) – 2f05ad954e

IoAdapter and WsAdapter take maxConcurrentMessages, the number of a client's messages handled at once (1000 by default; Infinity lifts it) – 0bd0810ed7

ValidationPipe takes maxErrorMessagesLength (1,000,000 characters by default); messages past it are replaced by a "Further validation errors were omitted" entry – 086c1c514f

Kafka: parser.maxMessageSize (16 MiB after decompression by default); larger messages are logged and skipped – 9bdf844fca

TCP server: drainTimeout (30 s by default, 0 disables) disconnects a peer that leaves its responses unread – 583d6077ad

MQTT server: reconnectOnConnackError is now enabled by default, so a refused connection attempt is retried; set it to false for the previous behaviour – a63cea600a

HttpServer.getRouteMatchingOptions(), an optional adapter hook that tells core how the router matches paths (see "Middleware exclusions" below) – 08d8677c8d

New defaults and behaviour changes

@nestjs/platform-express, @nestjs/platform-fastify: fieldNestingDepth and fieldArrayIndexLimit (#18074) now default to 32 and 1000; set them to Infinity to lift the limits – 94fcc93770

ValidationPipe validates with validationError.target: false unless the options set it, so an exceptionFactory that reads error.target gets undefined; set validationError.target to true for the old errors – 8c5a59bf63

ValidationPipe answers an array or a primitive sent for a validated class with a 400 – 197371c1f3

FileTypeValidator matches a string fileType up to the end of a name (e.g. font/woff no longer accepts font/woff2; use a RegExp for that) – 770c6f1a19

@SerializeOptions({}) on a handler no longer turns off the class schema – d27cb7017f

BaseExceptionFilter answers http-errors errors created with expose: false (the default from 500) with the standard reason phrase instead of their message – 9ed572f853

A StreamableFile error still gets a 400, but the body no longer carries the error message – 2f28d91afb

Files uploaded with a request that a pipe rejected are removed from storage – acb98de89e

@nestjs/platform-fastify: a route with fileSize: undefined (or null) falls back to the plugin's limit; set it to Infinity to keep uploads unlimited – dd549e1a74

@nestjs/platform-express: object error bodies are sent as application/json on routes with a non-JSON Content-Type – 7dc6e349d5

ConsoleLogger in JSON mode cuts a record short past about a million characters – ad4915eaa3

A global enhancer that the injector failed to instantiate now fails the application at startup – ae78524ced

A request- or transient-scoped APP_FILTER now logs a startup warning, as it only applies to exceptions thrown from controllers – df5275c5e1

Microservices: a pattern key longer than 256 characters matches no handler – accd27e66c

Kafka: a message may carry up to 10,000 header values (e419ff540b); headers given as a string or array are not sent (312777743f); reply headers are decoded as text (ee94f6aaae)

gRPC: request streams are paused while their replies wait to be written – 37e5cf7706

Deprecation: on TCP, Redis, NATS, MQTT and RabbitMQ, an @EventPattern() handler that replies to ClientProxy#send() now logs a deprecation warning. The reply is unchanged; in the next major version event handlers will not reply to send(), as on Kafka already – ba3668d36b

Middleware exclusions

MiddlewareConsumer.exclude() now compiles excluded routes with the router's case and trailing-slash matching (08d8677c8d). Update @nestjs/core together with @nestjs/platform-express / @nestjs/platform-fastify: with an adapter that does not implement getRouteMatchingOptions(), excluded routes are matched exactly (f5aa875e40), so on a lenient router other spellings of an excluded path run the middleware.

With header, media type or custom versioning, exclude({ path, method, version }) and enableCsrfProtection({ exclude }) apply only to requests that ask for one of the excluded versions – 1a7a31fa46

@nestjs/platform-fastify: the request hook used by enableCsrfProtection() and useSecurityHeaders() now runs before Nest and app.use() middleware with NestFactory.create() too, including middleware registered before either call, as it already did with Test.createNestApplication() – 8351806290

Bug fixes

platform-fastify

614d1ac7ea fix(fastify): send the status of an exception whose body is an error (@kamilmysliwiec)

8b420f788f fix(fastify): apply middleware to plugins registered before init (@kamilmysliwiec)

#18175 fix(fastify): keep raw-response cookies in the header helpers (@johnnyhuirilef)

c215fd9b4f fix(fastify): match middleware paths like a case-insensitive router (@kamilmysliwiec)

43d4420205 fix(fastify): pass version extractor errors to the error handler (@kamilmysliwiec)

1435ed22f4 fix(fastify): pass middleware rejections to the error handler (@kamilmysliwiec)

84c947faf9 fix(fastify): stop reading a streamable file for a head request (@kamilmysliwiec)

dd549e1a74 fix(fastify): let undefined upload limits fall back to the defaults (@kamilmysliwiec)

4735f8d050 fix(fastify): free memory storage chunks once a file is buffered (@kamilmysliwiec)

3e3e6eea6f fix(fastify): remove uploads cut off after their last chunk (@kamilmysliwiec)

c04a9182b9 fix(fastify): set the security headers on router error responses (@kamilmysliwiec)

... (truncated)

Commits

af37111 chore(release): publish v12.2.0 release
c8923bd fix(express,fastify): parse quoted media type version parameters (#18178)
fb8c2ca fix(core): mount wildcard middleware on every path when "/" is excluded
b75244f fix(express): run wildcard middleware on "/api/" for a named wildcard
8b8e839 fix(express): stop reading a streamable file for a head request
acb98de fix(core,express,fastify): remove uploads of requests a pipe rejected
1933cc9 fix(express,fastify): handle a StreamableFile that cannot be streamed
7dc6e34 fix(express): send object error bodies with a json content type
e075cda fix(express,fastify): let a route's dest replace the module's storage
84a16fe fix(deps): update dependency express to v5.3.0 (#18150)
Additional commits viewable in compare view

Updates drizzle-orm from 0.45.3 to 0.45.4

Release notes

Sourced from drizzle-orm's releases.

0.45.4

Fixed postgres-js not using prepared queries on explicit .prepare(name)

Commits

eab8bed Fixed postgres-js not using prepared queries on explicit .prepare(name) (...
See full diff in compare view

Updates zod from 4.6.5 to 4.6.7

Release notes

Sourced from zod's releases.

v4.6.7

Commits:

b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7

v4.6.6

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243fb, the pre-rewrite copy of 9c219833 with identical contents.

Commits:

0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini

9d5e60f162997b764b40d45aa02481888db50dea docs: import locales from zod/locales, not z.locales

34a626f307871ecbb0123947559328dc52ed5e3e docs: tighten the z.locales tree-shaking note

74304ce5b5796b5edb9a88ceb8e170b6ea3e82df release: stage npm versions instead of publishing them (#6622)

b2ef983e0711ff6517d6020b021071e2e5653efa docs: add Code for Japan to bronze sponsors

8fb2faf0584828a6a027d8279db36f6f52784462 docs: crop the Code for Japan logo and list it first in bronze

bacad518c41610d654658172d325874bf0ee6290 docs: square the Code for Japan logo to match the other bronze tiles

c42596bd1c87e941d7241d10e012c5c196adcc10 release: hold the run on the release-approval environment until the staged versions are approved (#6638)

a2ba4a67986a3e6b2b131be30084a2f460d9ea67 fix(types): declare record output and input as members, not base type arguments (#6645)

a0ebf970f2d752e5f58527cd2942ff48be4f46bd fix(v4): check array, set and map size bounds before parsing elements (#6652)

529f78dd9431b07f49647fee3aa0819b3f8b66b7 4.6.6

9c219833c3a3764fa1f1ea9c5ecec8254a63c0b1 ci: stage at verbose so a failed OIDC token exchange says why

Commits

b500a2e 4.6.7
9c21983 ci: stage at verbose so a failed OIDC token exchange says why
529f78d 4.6.6
a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#6652)
a2ba4a6 fix(types): declare record output and input as members, not base type argumen...
c42596b release: hold the run on the release-approval environment until the staged ve...
bacad51 docs: square the Code for Japan logo to match the other bronze tiles
8fb2faf docs: crop the Code for Japan logo and list it first in bronze
b2ef983 docs: add Code for Japan to bronze sponsors
74304ce release: stage npm versions instead of publishing them (#6622)
Additional commits viewable in compare view

…5 updates Bumps the nest-stack group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.3` | `12.2.0` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.3` | `12.2.0` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.3` | `12.2.0` | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.45.3` | `0.45.4` | | [zod](https://github.com/colinhacks/zod) | `4.6.5` | `4.6.7` | Updates `@nestjs/common` from 11.2.3 to 12.2.0 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.2.0/packages/common) Updates `@nestjs/core` from 11.2.3 to 12.2.0 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.2.0/packages/core) Updates `@nestjs/platform-express` from 11.2.3 to 12.2.0 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.2.0/packages/platform-express) Updates `drizzle-orm` from 0.45.3 to 0.45.4 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.45.3...0.45.4) Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 12.1.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nest-stack - dependency-name: "@nestjs/core" dependency-version: 12.1.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nest-stack - dependency-name: "@nestjs/platform-express" dependency-version: 12.1.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nest-stack - dependency-name: drizzle-orm dependency-version: 0.45.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nest-stack - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nest-stack ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-10-26T02:17:39Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

rodrigobnogueira · 2026-10-26T02:19:45Z

@dependabot rebase

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/nest-stack-91c64a76cb branch from cf499fb to 693b4b2 Compare October 18, 2026 09:02

dependabot Bot force-pushed the dependabot/npm_and_yarn/nest-stack-91c64a76cb branch 2 times, most recently from 87cd728 to b4304c0 Compare October 25, 2026 17:31

dependabot Bot force-pushed the dependabot/npm_and_yarn/nest-stack-91c64a76cb branch from b4304c0 to d43cd98 Compare October 25, 2026 17:37

rodrigobnogueira mentioned this pull request Oct 26, 2026

Clear the dependency advisories published on 2026-10-25 #147

Merged

16 tasks done

dependabot Bot closed this Oct 26, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/nest-stack-91c64a76cb branch October 26, 2026 02:17

rodrigobnogueira mentioned this pull request Oct 26, 2026

Import NestJS statically in specs so NestJS 12 boots one copy of it #148

Merged

12 tasks done

Navigation Menu

Repository navigation

chore(deps)(deps): Bump the nest-stack group across 1 directory with 5 updates - #139

chore(deps)(deps): Bump the nest-stack group across 1 directory with 5 updates#139
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nest-stack-91c64a76cb

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

rodrigobnogueira commented Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v12.2.0 (2026-10-19)

Notable changes

Bug fixes

v12.2.0 (2026-10-19)

Notable changes

Bug fixes

v12.2.0 (2026-10-19)

Notable changes

Bug fixes

0.45.4

v4.6.7

Commits:

v4.6.6

Commits:

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

rodrigobnogueira commented Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading