fix(deps): bump the nestjs group with 3 updates by dependabot[bot] · Pull Request #2071 · ffflorian/pkgsource

dependabot · 2026-10-20T04:53:57Z

Bumps the nestjs group with 3 updates: @nestjs/common, @nestjs/core and @nestjs/platform-express.

Updates @nestjs/common from 12.1.2 to 12.1.3

Release notes

Sourced from @nestjs/common's releases.

v12.1.3 (2026-10-12)

Bug fixes

core, microservices

#18111 fix(core,microservices): flush buffered logs when initialization fails (@thekhegay)

#17993 fix(core,microservices): run transient global enhancers on controllers (@johnnyhuirilef)

platform-express

#18110 fix(express): guard async request hook completion (@GiHoon1123)

#17973 fix(express): destroy the StreamableFile source on client disconnect (@maxymlyskov)

#17942 fix(express): run wildcard middleware on the bare global prefix path (@Chaoqi31)

core

#18104 fix(core): fail at startup for request-scoped class global enhancers (@thekhegay)

#18066 fix(core): stop silently dropping request-scoped global enhancers (@OmBhandwaldar)

#18072 fix(core): resolve uri versioned exclusions for the not-found handler (@basteez)

#18075 fix(core): normalize slashes when mapping controllers for middleware (@basteez)

#18086 fix(core): do not mutate the message when assigning an sse event id (@Metehan-Bicer)

#18025 fix(core): end sse streams whose event data cannot be serialized (@OmBhandwaldar)

#18011 fix(core): send status and headers set by handlers on sse responses (@johnnyhuirilef)

#18021 fix(core): honor a shutdown signal received while close() is in flight (@maxymlyskov)

#17987 fix(core): settle SSE lifecycle on early disconnect (@jackie-cqz)

#17986 fix(core): commit SSE headers for empty streams (@jackie-cqz)

#17978 fix(core): preserve explicit null values in reflectable decorators (@gophersg)

#17966 fix(core): run the shutdown sequence after a failed init (@kamilmysliwiec)

#17963 fix(core): send the expires header on sse responses (@Mohamed-Elshesheny)

#17953 fix(core): honor global prefix exclusions for overlapping versions (@Chaoqi31)

#17950 fix(core): let a GET middleware exclusion cover HEAD requests (@Chaoqi31)

#17951 fix(core): reset the listening state when the application closes (@Chaoqi31)

#17945 fix(core): hash Map, Set and RegExp options in deep-hash tokens (@Chaoqi31)

#17947 fix(core): treat VERSION_NEUTRAL in middleware routes as no version (@Chaoqi31)

#17941 fix(core): turn off express x-powered-by in useSecurityHeaders() (@Chaoqi31)

#17939 fix(core): name dynamic host modules in import error messages (@Chaoqi31)

#17940 fix(core): isolate nested transient providers injected into properties (@Chaoqi31)

microservices

#18108 fix(microservices): keep nats status updates alive when a listener throws (@kamilmysliwiec)

#18100 fix(microservices): default server options like the client factory does (@thekhegay)

#18083 fix(microservices): match rmq '#' wildcards in any position (@thekhegay)

#18095 fix(microservices): fail mqtt requests whose publish fails (@izg0820)

#18085 fix(microservices): preserve null payloads in kafka tombstone records (@Hangell)

#18081 fix(microservices): close the connection when the channel close fails (@hktitof)

#18071 fix(microservices): return the rmq reply publish so failures are handled (@maxymlyskov)

#18060 fix(microservices): fail redis listen on rejected subscriptions (@kamilmysliwiec)

#18056 fix(microservices): clone the kafka record before serializing (@Mihir-Rabari)

#18054 fix(microservices): do not crash when the redis connection drops (@maxymlyskov)

#18043 fix(microservices): fail pending kafka request on deserializer error (@hktitof)

#18002 fix(microservices): wait for the TCP TLS handshake (@jackie-cqz)

#17995 fix(microservices): survive custom deserializer errors in clients (@johnnyhuirilef)

#18027 fix(microservices): close both kafka client connections when one fails (@izg0820)

#18008 fix(microservices): unwrap records returned by message handlers (@johnnyhuirilef)

#18001 fix(microservices): wait for both Redis clients to be ready (@jackie-cqz)

#18000 fix(microservices): ignore stale NATS status events (@jackie-cqz)

... (truncated)

Commits

4514623 chore(release): publish v12.1.3 release
c5b7187 fix(common): keep custom decorator data that has schema or pipes keys (#18090)
406c402 fix(common): reject arrays nested in ParseArrayPipe items (#18073)
5291521 fix(common,core,express): answer method miss on an excluded route (#17923)
ea340b1 fix(common): collect configurable module alias dependencies (#17999)
1162fdc test(common): cover serializer context group overrides (#18026)
5eb62e2 fix(common): isolate file type regexp state (#17983)
c318730 fix(common): preserve parent validation constraints (#17982)
a468f79 fix(common): let a redeclared @Inject() property replace the parent's (#17949)
97c6e4f fix(common): keep inherited @Optional() properties optional (#17944)
See full diff in compare view

Updates @nestjs/core from 12.1.2 to 12.1.3

Release notes

Sourced from @nestjs/core's releases.

v12.1.3 (2026-10-12)

Bug fixes

core, microservices

#18111 fix(core,microservices): flush buffered logs when initialization fails (@thekhegay)

#17993 fix(core,microservices): run transient global enhancers on controllers (@johnnyhuirilef)

platform-express

#18110 fix(express): guard async request hook completion (@GiHoon1123)

#17973 fix(express): destroy the StreamableFile source on client disconnect (@maxymlyskov)

#17942 fix(express): run wildcard middleware on the bare global prefix path (@Chaoqi31)

core

#18104 fix(core): fail at startup for request-scoped class global enhancers (@thekhegay)

#18066 fix(core): stop silently dropping request-scoped global enhancers (@OmBhandwaldar)

#18072 fix(core): resolve uri versioned exclusions for the not-found handler (@basteez)

#18075 fix(core): normalize slashes when mapping controllers for middleware (@basteez)

#18086 fix(core): do not mutate the message when assigning an sse event id (@Metehan-Bicer)

#18025 fix(core): end sse streams whose event data cannot be serialized (@OmBhandwaldar)

#18011 fix(core): send status and headers set by handlers on sse responses (@johnnyhuirilef)

#18021 fix(core): honor a shutdown signal received while close() is in flight (@maxymlyskov)

#17987 fix(core): settle SSE lifecycle on early disconnect (@jackie-cqz)

#17986 fix(core): commit SSE headers for empty streams (@jackie-cqz)

#17978 fix(core): preserve explicit null values in reflectable decorators (@gophersg)

#17966 fix(core): run the shutdown sequence after a failed init (@kamilmysliwiec)

#17963 fix(core): send the expires header on sse responses (@Mohamed-Elshesheny)

#17953 fix(core): honor global prefix exclusions for overlapping versions (@Chaoqi31)

#17950 fix(core): let a GET middleware exclusion cover HEAD requests (@Chaoqi31)

#17951 fix(core): reset the listening state when the application closes (@Chaoqi31)

#17945 fix(core): hash Map, Set and RegExp options in deep-hash tokens (@Chaoqi31)

#17947 fix(core): treat VERSION_NEUTRAL in middleware routes as no version (@Chaoqi31)

#17941 fix(core): turn off express x-powered-by in useSecurityHeaders() (@Chaoqi31)

#17939 fix(core): name dynamic host modules in import error messages (@Chaoqi31)

#17940 fix(core): isolate nested transient providers injected into properties (@Chaoqi31)

microservices

#18108 fix(microservices): keep nats status updates alive when a listener throws (@kamilmysliwiec)

#18100 fix(microservices): default server options like the client factory does (@thekhegay)

#18083 fix(microservices): match rmq '#' wildcards in any position (@thekhegay)

#18095 fix(microservices): fail mqtt requests whose publish fails (@izg0820)

#18085 fix(microservices): preserve null payloads in kafka tombstone records (@Hangell)

#18081 fix(microservices): close the connection when the channel close fails (@hktitof)

#18071 fix(microservices): return the rmq reply publish so failures are handled (@maxymlyskov)

#18060 fix(microservices): fail redis listen on rejected subscriptions (@kamilmysliwiec)

#18056 fix(microservices): clone the kafka record before serializing (@Mihir-Rabari)

#18054 fix(microservices): do not crash when the redis connection drops (@maxymlyskov)

#18043 fix(microservices): fail pending kafka request on deserializer error (@hktitof)

#18002 fix(microservices): wait for the TCP TLS handshake (@jackie-cqz)

#17995 fix(microservices): survive custom deserializer errors in clients (@johnnyhuirilef)

#18027 fix(microservices): close both kafka client connections when one fails (@izg0820)

#18008 fix(microservices): unwrap records returned by message handlers (@johnnyhuirilef)

#18001 fix(microservices): wait for both Redis clients to be ready (@jackie-cqz)

#18000 fix(microservices): ignore stale NATS status events (@jackie-cqz)

... (truncated)

Commits

4514623 chore(release): publish v12.1.3 release
77613d6 fix(core,microservices): flush buffered logs when initialization fails (#18111)
2962bc2 fix(core): fail at startup for request-scoped class global enhancers (#18104)
1da34ad fix(core): stop silently dropping request-scoped global enhancers (#18066)
b33a988 fix(core): resolve uri versioned exclusions for the not-found handler (#18072)
f1a4d30 fix(core): normalize slashes when mapping controllers for middleware (#18075)
336a555 fix(core): do not mutate the message when assigning an sse event id (#18086)
f4b5ff4 fix(core): end sse streams whose event data cannot be serialized (#18025)
5291521 fix(common,core,express): answer method miss on an excluded route (#17923)
d10b7c0 fix(core): send status and headers set by handlers on sse responses (#18011)
Additional commits viewable in compare view

Updates @nestjs/platform-express from 12.1.2 to 12.1.3

Release notes

Sourced from @nestjs/platform-express's releases.

v12.1.3 (2026-10-12)

Bug fixes

core, microservices

#18111 fix(core,microservices): flush buffered logs when initialization fails (@thekhegay)

#17993 fix(core,microservices): run transient global enhancers on controllers (@johnnyhuirilef)

platform-express

#18110 fix(express): guard async request hook completion (@GiHoon1123)

#17973 fix(express): destroy the StreamableFile source on client disconnect (@maxymlyskov)

#17942 fix(express): run wildcard middleware on the bare global prefix path (@Chaoqi31)

core

#18104 fix(core): fail at startup for request-scoped class global enhancers (@thekhegay)

#18066 fix(core): stop silently dropping request-scoped global enhancers (@OmBhandwaldar)

#18072 fix(core): resolve uri versioned exclusions for the not-found handler (@basteez)

#18075 fix(core): normalize slashes when mapping controllers for middleware (@basteez)

#18086 fix(core): do not mutate the message when assigning an sse event id (@Metehan-Bicer)

#18025 fix(core): end sse streams whose event data cannot be serialized (@OmBhandwaldar)

#18011 fix(core): send status and headers set by handlers on sse responses (@johnnyhuirilef)

#18021 fix(core): honor a shutdown signal received while close() is in flight (@maxymlyskov)

#17987 fix(core): settle SSE lifecycle on early disconnect (@jackie-cqz)

#17986 fix(core): commit SSE headers for empty streams (@jackie-cqz)

#17978 fix(core): preserve explicit null values in reflectable decorators (@gophersg)

#17966 fix(core): run the shutdown sequence after a failed init (@kamilmysliwiec)

#17963 fix(core): send the expires header on sse responses (@Mohamed-Elshesheny)

#17953 fix(core): honor global prefix exclusions for overlapping versions (@Chaoqi31)

#17950 fix(core): let a GET middleware exclusion cover HEAD requests (@Chaoqi31)

#17951 fix(core): reset the listening state when the application closes (@Chaoqi31)

#17945 fix(core): hash Map, Set and RegExp options in deep-hash tokens (@Chaoqi31)

#17947 fix(core): treat VERSION_NEUTRAL in middleware routes as no version (@Chaoqi31)

#17941 fix(core): turn off express x-powered-by in useSecurityHeaders() (@Chaoqi31)

#17939 fix(core): name dynamic host modules in import error messages (@Chaoqi31)

#17940 fix(core): isolate nested transient providers injected into properties (@Chaoqi31)

microservices

#18108 fix(microservices): keep nats status updates alive when a listener throws (@kamilmysliwiec)

#18100 fix(microservices): default server options like the client factory does (@thekhegay)

#18083 fix(microservices): match rmq '#' wildcards in any position (@thekhegay)

#18095 fix(microservices): fail mqtt requests whose publish fails (@izg0820)

#18085 fix(microservices): preserve null payloads in kafka tombstone records (@Hangell)

#18081 fix(microservices): close the connection when the channel close fails (@hktitof)

#18071 fix(microservices): return the rmq reply publish so failures are handled (@maxymlyskov)

#18060 fix(microservices): fail redis listen on rejected subscriptions (@kamilmysliwiec)

#18056 fix(microservices): clone the kafka record before serializing (@Mihir-Rabari)

#18054 fix(microservices): do not crash when the redis connection drops (@maxymlyskov)

#18043 fix(microservices): fail pending kafka request on deserializer error (@hktitof)

#18002 fix(microservices): wait for the TCP TLS handshake (@jackie-cqz)

#17995 fix(microservices): survive custom deserializer errors in clients (@johnnyhuirilef)

#18027 fix(microservices): close both kafka client connections when one fails (@izg0820)

#18008 fix(microservices): unwrap records returned by message handlers (@johnnyhuirilef)

#18001 fix(microservices): wait for both Redis clients to be ready (@jackie-cqz)

#18000 fix(microservices): ignore stale NATS status events (@jackie-cqz)

... (truncated)

Commits

4514623 chore(release): publish v12.1.3 release
c9c251c fix(express): handle async request and response hook errors (#18110)
cf52046 feat(express,fastify): add field nesting and array index upload limits (#18074)
5291521 fix(common,core,express): answer method miss on an excluded route (#17923)
b64b3a0 fix(express): destroy the StreamableFile source on client disconnect (#17973)
82a77eb fix(express): run wildcard middleware on the bare global prefix path (#17942)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the nestjs group with 3 updates: [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common), [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) and [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express). Updates `@nestjs/common` from 12.1.2 to 12.1.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.1.3/packages/common) Updates `@nestjs/core` from 12.1.2 to 12.1.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.1.3/packages/core) Updates `@nestjs/platform-express` from 12.1.2 to 12.1.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.1.3/packages/platform-express) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 12.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nestjs - dependency-name: "@nestjs/core" dependency-version: 12.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nestjs - dependency-name: "@nestjs/platform-express" dependency-version: 12.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nestjs ... Signed-off-by: dependabot[bot] <support@github.com>

ffflorian · 2026-10-20T07:14:21Z

@dependabot rebase

dependabot · 2026-10-20T07:14:23Z

I can't perform the requested action because I don't have any knowledge about this pull request.

## [1.14.31](v1.14.30...v1.14.31) (2026-10-20) ### Bug Fixes * **deps:** bump node from 26.11.1-alpine to 26.12.0-alpine ([#2070](#2070)) ([d0e439f](d0e439f)) * **deps:** bump the nestjs group with 3 updates ([#2071](#2071)) [ci skip] ([e5be204](e5be204))

dependabot Bot assigned ffflorian Oct 20, 2026

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 20, 2026

merge from main [ci skip]

1316b0c

ffflorian merged commit e5be204 into main Oct 20, 2026
2 checks passed

ffflorian deleted the dependabot/npm_and_yarn/nestjs-d609bb6e04 branch October 20, 2026 07:16

Navigation Menu

Repository navigation

fix(deps): bump the nestjs group with 3 updates - #2071

fix(deps): bump the nestjs group with 3 updates#2071
ffflorian merged 2 commits into
mainfrom
dependabot/npm_and_yarn/nestjs-d609bb6e04

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

ffflorian commented Oct 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 20, 2026

v12.1.3 (2026-10-12)

Bug fixes

v12.1.3 (2026-10-12)

Bug fixes

v12.1.3 (2026-10-12)

Bug fixes

Uh oh!

ffflorian commented Oct 20, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 20, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant