Skip to content

fix(deps): bump the nestjs group across 1 directory with 4 updates - #2095

Merged
ffflorian merged 1 commit into
mainfrom
dependabot/npm_and_yarn/nestjs-c474e21878
Nov 9, 2026
Merged

ffflorian merged 1 commit into
mainfrom
dependabot/npm_and_yarn/nestjs-c474e21878

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the nestjs group with 4 updates in the / directory: @nestjs/common, @nestjs/core, @nestjs/platform-express and @nestjs/swagger.

Updates @nestjs/common from 12.3.2 to 12.3.3

Commits
  • 59f3379 chore(release): publish v12.3.3 release
  • 8d9dd9d fix(deps): update dependency tslib to v2.9.1 (#18346)
  • 8fbfa21 fix(deps): update dependency file-type to v22.3.0 (#18334)
  • 9adef69 fix(common): strip prototype keys from values with cycles (#18340)
  • 8609d7b fix(microservices,websockets): load with an older common (#18304)
  • See full diff in compare view

Updates @nestjs/core from 12.3.2 to 12.3.3

Commits
  • 59f3379 chore(release): publish v12.3.3 release
  • 7a3d21a fix(core): watch the response for a disconnect when the socket cannot report ...
  • 4d892ae fix(core): share one in-flight load between concurrent lazy loads (#18371)
  • 08bff32 fix(core): drop a middleware route an all-methods route covers (#18357)
  • 8d9dd9d fix(deps): update dependency tslib to v2.9.1 (#18346)
  • aa8e61f fix(core): read optional groups and mixed segments when comparing routes (#18...
  • aa4d20d fix(core): load with an older common (#18348)
  • 060fae3 perf(core): skip redundant dependency tree resets during bootstrap (#18339)
  • 65b4c15 test(core): wait for sse output instead of a fixed delay (#18332)
  • 4aa87ad fix(core): read the sse disconnect from the response when the socket cannot r...
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 12.3.2 to 12.3.3

Commits

Updates @nestjs/swagger from 12.0.5 to 12.1.0

Release notes

Sourced from @​nestjs/swagger's releases.

Release 12.1.0

Behavior changes

  • PartialType() / DeepPartialType(): documented properties without validators are now stripped or rejected by a whitelisting ValidationPipe.
  • swagger-ui-init.js ignores the url query parameter of the docs page. Use swaggerUrl or swaggerOptions.url / urls instead.
  • When the setup path ends in a route parameter (e.g. docs/:tenant), the /<last segment>/ aliases for the init script and static assets are no longer registered.
  • DocumentBuilder: addGlobalParameters() and addGlobalResponse() apply only to documents created from that builder's config, and build() returns a new copy on every call.
  • The demo page (index.html) and the LICENSE file of swagger-ui-dist are never served, and the static assets no longer serve directory index files.
  • @ApiHideProperty() hides a property inherited from a parent class, and a property decorated with both @ApiProperty() and @ApiHideProperty() is hidden.
  • @ApiIncludeEndpoint(false) counts as not decorated under onlyIncludeDecoratedEndpoints, and controllers without any documented endpoint no longer register their class-level models.
  • A default holding a model lists only the properties the model documents.
  • Inline OmitType() / PickType() schema names spell only documented keys, and mapped type names are resolved when they are read.
  • The CLI plugin metadata of a class that re-declares an inherited property takes precedence over what was inferred for the parent class. Options set with decorators still apply.
  • Routes sharing a path and method document the union of their security requirements.
  • OpenAPI < 3.1: a webhook sharing its path and method with a route is left out of the document (with a warning) instead of replacing the route.
  • Response links to operations that are not in the document are removed.

Fixes

  • fix(type-helpers): make only validated properties optional in partial types (3254eb63)
  • fix(swagger-module): skip asset aliases when the path ends in a param (ab1e33dc)
  • fix(swagger-ui): ignore the url query parameter in swagger-ui-init.js (820cb613)
  • fix(type-helpers): match numeric keys in OmitType and PickType (74776cc7)
  • fix(document-builder): scope global metadata and built configs to the builder (5245be90)
  • fix(schema): omit hidden model properties from property defaults (933d8e64)
  • fix(explorer): apply endpoint exclusion before exploring a controller (cc75875a)
  • fix(explorer): stop sharing security metadata between targets and operations (a79603d9)
  • fix(swagger-module): keep routes that share a path with a webhook (4934af4e)
  • fix(decorators): let @​ApiHideProperty() hide inherited properties (5beb3294)
  • fix(plugin): honor aliased and parameter-level hide decorators (d77fdf25)
  • fix(explorer): apply plugin metadata to the methods its class declares (68c5b450)
  • fix(transformer): keep security requirements of routes sharing a path (1c45e42d)
  • fix(services): document only the parameters an override declares (66635c96)
  • fix(swagger-module): drop links to operations missing from the document (d3edf0a2)
  • fix(swagger-module): never serve the demo page and license of swagger-ui-dist (332865b1)
  • fix(type-helpers): spell only documented keys in mapped type names (134d45e3)
  • fix(services): prefer a re-declaration's plugin metadata over inferred metadata (3def7ca8)
  • fix(deps): update dependency @​nestjs/mapped-types to v12.0.1 (b2293a0e)

What's Changed

New Contributors

... (truncated)

Commits
  • 1c6cb81 chore(): release v12.1.0
  • b2293a0 fix(deps): update dependency @​nestjs/mapped-types to v12.0.1
  • 3def7ca fix(services): prefer a re-declaration's plugin metadata over inferred metadata
  • 134d45e fix(type-helpers): spell only documented keys in mapped type names
  • 332865b fix(swagger-module): never serve the demo page and license of swagger-ui-dist
  • d3edf0a fix(swagger-module): drop links to operations missing from the document
  • 66635c9 fix(services): document only the parameters an override declares
  • 1c45e42 fix(transformer): keep security requirements of routes sharing a path
  • 68c5b45 fix(explorer): apply plugin metadata to the methods its class declares
  • d77fdf2 fix(plugin): honor aliased and parameter-level hide decorators
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 9, 2026
Bumps the nestjs group with 4 updates in the / directory: [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common), [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core), [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) and [@nestjs/swagger](https://github.com/nestjs/swagger).


Updates `@nestjs/common` from 12.3.2 to 12.3.3
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.3.3/packages/common)

Updates `@nestjs/core` from 12.3.2 to 12.3.3
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.3.3/packages/core)

Updates `@nestjs/platform-express` from 12.3.2 to 12.3.3
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.3.3/packages/platform-express)

Updates `@nestjs/swagger` from 12.0.5 to 12.1.0
- [Release notes](https://github.com/nestjs/swagger/releases)
- [Commits](nestjs/swagger@12.0.5...12.1.0)

---
updated-dependencies:
- dependency-name: "@nestjs/common"
  dependency-version: 12.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nestjs
- dependency-name: "@nestjs/core"
  dependency-version: 12.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nestjs
- dependency-name: "@nestjs/platform-express"
  dependency-version: 12.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nestjs
- dependency-name: "@nestjs/swagger"
  dependency-version: 12.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nestjs
...

Signed-off-by: dependabot[bot] <support@github.com>
@ffflorian

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title fix(deps): bump the nestjs group with 4 updates fix(deps): bump the nestjs group across 1 directory with 4 updates Nov 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nestjs-c474e21878 branch from 571d54b to 0a22cdf Compare November 9, 2026 20:17
@ffflorian
ffflorian merged commit 091b0c7 into main Nov 9, 2026
6 checks passed
@ffflorian
ffflorian deleted the dependabot/npm_and_yarn/nestjs-c474e21878 branch November 9, 2026 20:19
github-actions Bot pushed a commit that referenced this pull request Nov 9, 2026
## [1.14.36](v1.14.35...v1.14.36) (2026-11-09)

### Bug Fixes

* **deps:** bump node from `c6ad9e9` to `8996bb5` ([#2093](#2093)) ([b3006ee](b3006ee))
* **deps:** bump the nestjs group across 1 directory with 4 updates ([#2095](#2095)) [ci skip] ([091b0c7](091b0c7))

### Continuous Integration

* **deps:** bump ffflorian/actions from 1.30.12 to 1.30.13 ([#2094](#2094)) [ci skip] ([352ec2b](352ec2b))

### Miscellaneous Chores

* **deps-dev:** bump @ffflorian/oxlint-config from 1.0.14 to 1.0.15 ([#2098](#2098)) [ci skip] ([f57f779](f57f779))
* **deps-dev:** bump eslint from 10.13.0 to 10.14.0 ([#2099](#2099)) [ci skip] ([da7abfd](da7abfd))
* **deps-dev:** bump the oxlint group with 2 updates ([#2096](#2096)) [ci skip] ([b255d67](b255d67))
* **deps-dev:** bump the vitest group across 1 directory with 2 updates ([#2097](#2097)) [ci skip] ([4567eb4](4567eb4))
* stricter nestjs dependency grouping [ci skip] ([f173259](f173259))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant