Skip to content

build(deps): bump the nestjs group across 1 directory with 9 updates - #466

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/nestjs-c6b3554ffd
Closed

build(deps): bump the nestjs group across 1 directory with 9 updates#466
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/nestjs-c6b3554ffd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the nestjs group with 9 updates in the / directory:

Package From To
@nestjs/common 11.1.0 12.1.3
@nestjs/config 4.0.2 12.0.1
@nestjs/core 11.1.0 12.1.3
@nestjs/cqrs 11.0.3 12.1.0
@nestjs/jwt 11.0.0 12.0.3
@nestjs/passport 11.0.5 12.0.0
@nestjs/platform-fastify 11.1.0 12.1.3
@nestjs/swagger 11.2.0 12.0.2
@nestjs/testing 11.1.0 12.1.3

Updates @nestjs/common from 11.1.0 to 12.1.3

Release notes

Sourced from @​nestjs/common's releases.

v12.1.3 (2026-10-12)

Bug fixes

... (truncated)

Commits
  • 4514623 chore(release): publish v12.1.3 release
  • c5b7187 fix(common): keep custom decorator data that has schema or pipes keys (#18090)
  • 406c402 fix(common): reject arrays nested in ParseArrayPipe items (#18073)
  • 5291521 fix(common,core,express): answer method miss on an excluded route (#17923)
  • ea340b1 fix(common): collect configurable module alias dependencies (#17999)
  • 1162fdc test(common): cover serializer context group overrides (#18026)
  • 5eb62e2 fix(common): isolate file type regexp state (#17983)
  • c318730 fix(common): preserve parent validation constraints (#17982)
  • a468f79 fix(common): let a redeclared @Inject() property replace the parent's (#17949)
  • 97c6e4f fix(common): keep inherited @Optional() properties optional (#17944)
  • Additional commits viewable in compare view

Updates @nestjs/config from 4.0.2 to 12.0.1

Release notes

Sourced from @​nestjs/config's releases.

Release 12.0.1

What's Changed

New Contributors

Full Changelog: nestjs/config@12.0.0...12.0.1

12.0.0

What's Changed

@nestjs/config is now a native ES module, environment validation is built on Standard Schema instead of Joi-specific code, and the major version is aligned with the Nest 12 release line (there is no 5.x — 4.0.4 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

// ✅
import { ConfigModule, ConfigService } from '@nestjs/config';
// ❌ no longer resolvable
import { ConfigService } from '@​nestjs/config/dist/config.service';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support (Node 20.19+ / 22.12+), a CommonJS app can keep using require('@nestjs/config') unchanged.

Validation is now Standard Schema based

validationSchema accepts any schema implementing the Standard Schema spec — Zod (v3, v4, v4-mini), Valibot, ArkType, Joi 18+, and anything else that adopts it. There is no longer any Joi-specific code path in the module, and Joi is no longer implied as the validation library.

ConfigModule.forRoot({
  validationSchema: z.object({
    PORT: z.coerce.number().default(3000),
    DATABASE_NAME: z.string(),
  }),
});

Joi keeps working — it implements Standard Schema as of v18 — and the historical abortEarly: false / allowUnknown: true defaults are still applied automatically for Joi schemas, so existing Joi setups behave as before.

Breaking: validationOptions shape

Options are now the Standard Schema Options object, and library-specific settings move under libraryOptions:

... (truncated)

Commits
  • 2785b5f chore(): release v12.0.1
  • 0c0a0d6 fix(deps): update dependency dotenv to v18.0.3 (#2444)
  • 130ee69 fix(deps): update dependency es-toolkit to v1.52.0 (#2411)
  • ab84892 chore(deps): update node.js to v24.21.0 (#2420)
  • d71b4a8 fix(config): prevent prefix corruption and escape propertyPath in updateInter...
  • 498b207 fix(deps): update dependency dotenv to v18 (#2437)
  • c32556f chore(deps): update dependency oxlint to v1.85.0 (#2443)
  • 58af4ad chore(deps): update nest monorepo to v12.0.4 (#2442)
  • 56fdf53 chore(deps): update commitlint monorepo to v21.2.3 (#2441)
  • 73353eb chore(deps): update dependency @​types/node to v24.13.6 (#2440)
  • Additional commits viewable in compare view

Updates @nestjs/core from 11.1.0 to 12.1.3

Release notes

Sourced from @​nestjs/core's releases.

v12.1.3 (2026-10-12)

Bug fixes

... (truncated)

Commits
  • 4514623 chore(release): publish v12.1.3 release
  • 77613d6 fix(core,microservices): flush buffered logs when initialization fails (#18111)
  • 2962bc2 fix(core): fail at startup for request-scoped class global enhancers (#18104)
  • 1da34ad fix(core): stop silently dropping request-scoped global enhancers (#18066)
  • b33a988 fix(core): resolve uri versioned exclusions for the not-found handler (#18072)
  • f1a4d30 fix(core): normalize slashes when mapping controllers for middleware (#18075)
  • 336a555 fix(core): do not mutate the message when assigning an sse event id (#18086)
  • f4b5ff4 fix(core): end sse streams whose event data cannot be serialized (#18025)
  • 5291521 fix(common,core,express): answer method miss on an excluded route (#17923)
  • d10b7c0 fix(core): send status and headers set by handlers on sse responses (#18011)
  • Additional commits viewable in compare view

Updates @nestjs/cqrs from 11.0.3 to 12.1.0

Release notes

Sourced from @​nestjs/cqrs's releases.

Release 12.1.0

12.1.0 (2026-09-29)

Bug fixes

  • #2373 fix: log the event handler class name on unhandled exceptions (@​Cayan)

Enhancements

Committers: 2

Release 12.0.0

What's Changed

@nestjs/cqrs is now a native ES module, and the major version is aligned with the Nest 12 release line (11.0.3 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

// ✅
import { CommandBus, EventBus, AggregateRoot } from '@nestjs/cqrs';
// ❌ no longer resolvable
import { CommandBus } from '@​nestjs/cqrs/dist/command-bus';

./package.json is exported as well, for tooling that reads the manifest.

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, CommonJS consumers can keep requiring the package exactly as before:

const { CommandBus } = require('@nestjs/cqrs'); // still works

The . export declares import, require, and default conditions, all pointing at the same ESM build, so CJS resolution no longer fails with ERR_PACKAGE_PATH_NOT_EXPORTED.

Breaking changes

  • Node.js ^20.19.0 || >=22.12.0 is now required (engines). These are the versions where require(esm) is unflagged — older Node cannot load ESM from CommonJS at all.
  • Nest 12 is now the required peer. @nestjs/common and @nestjs/core peer ranges are ^12.0.0; support for Nest 10 and 11 has been dropped.
  • Deep imports removed. Anything reaching into @nestjs/cqrs/dist/* must import from the package root instead.
  • Root shims removed. index.js / index.d.ts at the package root no longer exist; resolution goes through the exports map.

There are no changes to the public API — command/query/event buses, handlers, sagas, AggregateRoot, decorators, and operators all behave exactly as they did in v11.

Commits
  • 55fb4a0 chore(): release v12.1.0
  • d30fc4e Merge pull request #2379 from nestjs/renovate/oxlint-monorepo
  • 5a3994d Merge pull request #2378 from nestjs/renovate/nest-monorepo
  • d53d1f0 Merge pull request #2380 from nestjs/feat/aggregate-commit-context
  • 3ed516b feat: let aggregates commit with a dispatcher context
  • a9c9e10 chore(deps): update dependency oxlint to v1.86.0
  • f5432a9 chore(deps): update nest monorepo to v12.1.1
  • d13f1fc chore(deps): update dependency lint-staged to v17.6.0 (#2376)
  • e327d59 chore(deps): update dependency @​types/node to v24.19.0 (#2375)
  • a27e6db Merge pull request #2374 from nestjs/renovate/vite-8.x
  • Additional commits viewable in compare view

Updates @nestjs/jwt from 11.0.0 to 12.0.3

Release notes

Sourced from @​nestjs/jwt's releases.

Release 12.0.3

What's Changed

New Contributors

Full Changelog: nestjs/jwt@12.0.2...12.0.3

Release 12.0.2

What's Changed

New Contributors

Full Changelog: nestjs/jwt@12.0.1...12.0.2

Release 12.0.1

  • fix: jsonwebtoken esm imports (05d0075)

Release 12.0.0

What's Changed

@nestjs/jwt is now a native ES module, and the major version is aligned with the Nest 12 release line

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

// ✅
import { JwtModule, JwtService } from '@nestjs/jwt';
// ❌ no longer resolvable
import { JwtService } from '@​nestjs/jwt/dist/jwt.service';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support (Node 20.19+, 22.12+, and all of 24.x), a CommonJS Nest application can keep requiring the package exactly as before:

const { JwtModule, JwtService } = require('@nestjs/jwt');

TypeScript users compiling to CommonJS are unaffected as long as their runtime is on a supported Node version. On older Node releases, require() of this package will throw ERR_REQUIRE_ESM — upgrade Node, or switch the consuming code to import.

jsonwebtoken re-exports

... (truncated)

Commits
  • 1b8f652 chore(): release v12.0.3
  • 99ac1f9 fix(jwt): suppress async provider rejection on string payload error (#2295)
  • 96bfd75 chore(deps): update nest monorepo to v12.1.2 (#2289)
  • b74a723 chore(deps): update dependency @​types/node to v24.19.2 (#2290)
  • 41ac94b chore(deps): update dependency oxlint to v1.87.0 (#2291)
  • 19b1466 chore(deps): update dependency release-it to v21.1.1 (#2292)
  • d399c15 chore(deps): update dependency prettier to v3.9.10 (#2293)
  • 61c5e94 ci(): upgrade circleci config to version 2.1 (#2296)
  • 1801d4d Merge pull request #2294 from thekhegay/fix/sign-async-secret-provider-reject
  • d995c2f fix(jwt): reject async sign when the secret provider rejects
  • Additional commits viewable in compare view

Updates @nestjs/passport from 11.0.5 to 12.0.0

Release notes

Sourced from @​nestjs/passport's releases.

Release 12.0.0

What's Changed

@nestjs/passport is now a native ES module, and the major version is aligned with the Nest 12 release line.

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals (e.g. @nestjs/passport/dist/auth.guard) are no longer resolvable — import from the package root:

import { AuthGuard, PassportModule, PassportStrategy } from '@nestjs/passport';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, a CommonJS app can keep doing:

const { AuthGuard, PassportModule } = require('@nestjs/passport');

This requires Node.js 20.19+ or 22.12+ (where require(esm) is enabled by default). On older Node versions you must either upgrade Node or move your app to ESM.

AuthGuard no longer forwards module options to passport.authenticate()

defaultStrategy and property — options that belong to PassportModule.register(), not to Passport itself — were being passed straight through to passport.authenticate(), where they could collide with strategy-level options. They are now stripped before the call, so a strategy only ever receives real AuthenticateOptions.

The signature of getAuthenticateOptions() changed accordingly:

// before
getAuthenticateOptions(
  context: ExecutionContext,
): Promise<IAuthModuleOptions> | IAuthModuleOptions | undefined;
// after
getAuthenticateOptions(
context: ExecutionContext,
):
| Promise<AuthGuardAuthenticateOptions>
| AuthGuardAuthenticateOptions
| undefined;

AuthGuardAuthenticateOptions is exported from the package root and is passport.AuthenticateOptions with defaultStrategy explicitly disallowed. If you override getAuthenticateOptions() and return defaultStrategy, TypeScript will now flag it — remove it and set it via PassportModule.register({ defaultStrategy: '...' }) instead.

Peer dependencies

"peerDependencies": {
</tr></table>

... (truncated)

Commits
  • 0f15350 chore(): release v12.0.0
  • c6af6f6 chore: upgrade to v12
  • d05c93e chore(deps): update dependency oxlint to v1.80.0 (#2309)
  • 8d06e0c chore(deps): update nest monorepo to v11.2.3 (#2308)
  • 875fddc chore(deps): update dependency oxlint to v1.79.0 (#2307)
  • dd63061 chore(deps): update vitest monorepo to v4.1.11 (#2306)
  • 28e6701 Merge pull request #2300 from GiHoon1123/fix-947-authenticate-options
  • 849d11c Merge master into fix-947-authenticate-options, resolve conflicts
  • de02b20 Merge pull request #2250 from nestjs/renovate/cimg-node-24.x
  • e27a9c8 Merge pull request #2230 from nestjs/chore/esm-migration
  • Additional commits viewable in compare view

Updates @nestjs/platform-fastify from 11.1.0 to 12.1.3

Release notes

Sourced from @​nestjs/platform-fastify's releases.

v12.1.3 (2026-10-12)

Bug fixes

... (truncated)

Commits
  • 4514623 chore(release): publish v12.1.3 release
  • 8345974 fix(fastify): answer the shutdown hooks 503 with fastify's json body (#18109)
  • 4fa1e4e fix(fastify): honor return503OnClosing during the shutdown hooks (#18101)
  • dc72036 fix(fastify): build multipart field objects from present items only
  • cf52046 feat(express,fastify): add field nesting and array index upload limits (#18074)
  • f8e7197 fix(fastify): reject listen() on an invalid port (#18059)
  • 720178a fix(deps): update dependency @​fastify/formbody to v9.0.1 (#18050)
  • e07144b fix(deps): update dependency @​fastify/middie to v9.3.5 (#18051)
  • b647b57 fix(fastify): listen on a socket path (#18053)
  • 7e6755e fix(deps): update dependency @​fastify/cors to v11.3.1 (#18039)
  • Additional commits viewable in compare view

Updates @nestjs/swagger from 11.2.0 to 12.0.2

Release notes

Sourced from @​nestjs/swagger's releases.

12.0.2

What's Changed

@dependabot dependabot Bot added scope:dependencies dependency updates type:build changes to the build system or external dependencies labels Aug 31, 2026
@flex-development
flex-development Bot enabled auto-merge (squash) August 31, 2026 20:45
@dependabot
dependabot Bot force-pushed the dependabot/bun/nestjs-c6b3554ffd branch from 33015eb to ffcba92 Compare September 3, 2026 03:17
@dependabot
dependabot Bot force-pushed the dependabot/bun/nestjs-c6b3554ffd branch 2 times, most recently from 2e828c1 to 129885c Compare September 22, 2026 20:44
@dependabot
dependabot Bot force-pushed the dependabot/bun/nestjs-c6b3554ffd branch 4 times, most recently from 963d8b0 to 6d62fcb Compare October 20, 2026 20:43
@dependabot
build(deps): bump the nestjs group across 1 directory with 9 updates
abe5f5c 
Bumps the nestjs group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.0` | `12.1.3` |
| [@nestjs/config](https://github.com/nestjs/config) | `4.0.2` | `12.0.1` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.0` | `12.1.3` |
| [@nestjs/cqrs](https://github.com/nestjs/cqrs) | `11.0.3` | `12.1.0` |
| [@nestjs/jwt](https://github.com/nestjs/jwt) | `11.0.0` | `12.0.3` |
| [@nestjs/passport](https://github.com/nestjs/passport) | `11.0.5` | `12.0.0` |
| [@nestjs/platform-fastify](https://github.com/nestjs/nest/tree/HEAD/packages/platform-fastify) | `11.1.0` | `12.1.3` |
| [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.2.0` | `12.0.2` |
| [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.1.0` | `12.1.3` |



Updates `@nestjs/common` from 11.1.0 to 12.1.3
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.1.3/packages/common)

Updates `@nestjs/config` from 4.0.2 to 12.0.1
- [Release notes](https://github.com/nestjs/config/releases)
- [Commits](nestjs/config@4.0.2...12.0.1)

Updates `@nestjs/core` from 11.1.0 to 12.1.3
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.1.3/packages/core)

Updates `@nestjs/cqrs` from 11.0.3 to 12.1.0
- [Release notes](https://github.com/nestjs/cqrs/releases)
- [Commits](nestjs/cqrs@11.0.3...12.1.0)

Updates `@nestjs/jwt` from 11.0.0 to 12.0.3
- [Release notes](https://github.com/nestjs/jwt/releases)
- [Commits](nestjs/jwt@11.0.0...12.0.3)

Updates `@nestjs/passport` from 11.0.5 to 12.0.0
- [Release notes](https://github.com/nestjs/passport/releases)
- [Commits](nestjs/passport@11.0.5...12.0.0)

Updates `@nestjs/platform-fastify` from 11.1.0 to 12.1.3
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.1.3/packages/platform-fastify)

Updates `@nestjs/swagger` from 11.2.0 to 12.0.2
- [Release notes](https://github.com/nestjs/swagger/releases)
- [Commits](nestjs/swagger@11.2.0...12.0.2)

Updates `@nestjs/testing` from 11.1.0 to 12.1.3
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.1.3/packages/testing)

---
updated-dependencies:
- dependency-name: "@nestjs/common"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/config"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/core"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/cqrs"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/jwt"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/passport"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/platform-fastify"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/swagger"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nestjs
- dependency-name: "@nestjs/testing"
  dependency-version: 12.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: nestjs
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bun/nestjs-c6b3554ffd branch from 6d62fcb to abe5f5c Compare October 21, 2026 20:43
@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 22, 2026
auto-merge was automatically disabled October 22, 2026 20:47

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/bun/nestjs-c6b3554ffd branch October 22, 2026 20:47
@github-project-automation github-project-automation Bot moved this from 🆕 New to 🥶 Icebox in @flex-development/sneusers Oct 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

scope:dependencies dependency updates type:build changes to the build system or external dependencies

Projects

@flex-development/sneusers
Status: 🥶 Icebox

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants