Bump the safe-updates group across 1 directory with 20 updates by dependabot[bot] · Pull Request #38 · tokenzyme/tokenzyme-core

dependabot · 2026-10-01T01:02:24Z

Bumps the safe-updates group with 20 updates in the / directory:

Package	From	To
@aws-sdk/client-s3	`3.1097.0`	`3.1141.0`
@aws-sdk/s3-request-presigner	`3.1097.0`	`3.1141.0`
@nestjs/apollo	`13.4.2`	`13.4.5`
@nestjs/common	`11.1.28`	`11.2.6`
@nestjs/core	`11.1.28`	`11.2.6`
@nestjs/graphql	`13.4.2`	`13.4.5`
@nestjs/platform-fastify	`11.1.28`	`11.2.6`
@nestjs/platform-socket.io	`11.1.28`	`11.2.6`
@nestjs/websockets	`11.1.28`	`11.2.6`
fastify	`5.10.0`	`5.12.5`
graphql-scalars	`1.25.0`	`1.26.0`
pg	`8.22.0`	`8.23.0`
@types/pg	`8.20.0`	`8.23.1`
sharp	`0.35.3`	`0.35.5`
socket.io	`4.8.3`	`4.8.4`
ws	`8.21.1`	`8.22.0`
@nestjs/testing	`11.1.28`	`11.2.6`
@types/luxon	`3.7.2`	`3.7.5`
@types/node	`24.13.3`	`24.19.0`
@types/pg	`8.20.0`	`8.23.1`
prettier	`3.9.6`	`3.9.9`

Updates @aws-sdk/client-s3 from 3.1097.0 to 3.1141.0

Release notes

Sourced from @aws-sdk/client-s3's releases.

v3.1141.0

3.1141.0(2026-09-25)

Chores

codegen: smithy-aws-typescript-codegen 0.54.0 (#8314) (ad80ce3e)

New Features

client-connect: Agent Privacy During Hold is a new privacy capability for Amazon Connect Voice that prevents agent audio from being captured in call recordings or Contact Lens conversational analytics during hold. When enabled, agents are automatically muted on entering hold and unmuted on resuming the contact (03527f9e)

client-qconnect: Release shapes for the proactive agentic recommendations and the multi-knowledge base search features. Increases the maximum length of QuickResponseContent. (e008332b)

client-bedrock-agent: Adds support for calling VPC configuration API's in Bedrock. These configurations allow the use of On Prem connectors in Bedrock Managed Knowledge bases (18524dc6)

client-mediaconnect: This release adds support for RTMP push router outputs in AWS Elemental MediaConnect. (5bd8d80b)

client-securityagent: This release adds the ListActorMessages operation, which returns the multi-factor authentication messages received at an actor's server-generated email address (10e53d50)

client-arc-region-switch: Adds a service quota checker to Region switch to verify quota parity between your primary and standby Region, and automatically submit quota limit increases. Adds an optional EC2 Auto Scaling and ECS setting that waits for instances or tasks in the scaled-up Region to be healthy in target groups. (cca33e38)

client-bedrock-agentcore-control: Amazon Bedrock AgentCore Payments now supports credential rotation for payment connectors, letting you rotate API and wallet secrets for Quick Create payment auths from the console. This release also adds Type and Creation type columns to the payment managers views. (adca591f)

client-neptune-graph: Add GraphIdentifier filter for ListImportTasks (9b9aea9b)

client-rekognition: This release adds support for Feedback and Metadata in the GetFaceLivenessSessionResults response. Feedback returns codes explaining why a Face Liveness check produced its result. Metadata includes the client SDK type. (0831c361)

client-glue: add support for table level federation (a44458b7)

client-wellarchitected: This change releases the Well-Architected Agent, a generative AI service that analyzes a customer's AWS environment and delivers personalized, prioritized recommendations across cost, security, performance, and resilience. (d0656586)

For list of updated packages, view updated-packages.md in assets-3.1141.0.zip

v3.1140.0

3.1140.0(2026-09-24)

Documentation Changes

client-route53resolver: Documentation updates for Route 53 Resolver. Clarifies which Outpost Resolver operations apply to first-generation AWS Outposts and that Resolver is managed automatically on second-generation Outposts. Adds Local Network Interface subnet compatibility notes for Resolver endpoints. (b4432aba)

client-iot: Fixed ListV2LoggingLevels and DeleteV2LoggingLevel documentation to include all supported target-types (4dcf76d5)

New Features

clients: update client endpoints as of 2026-09-24 (29a8566c)

client-eventbridgev2: Introducing Amazon EventBridge enhanced Custom event bus, a new shareable event bus for organizational-scale event-driven applications feature ordered delivery, deduplication, open event formats, and cross-account bus sharing. (69fbe6a2)

client-datazone: Amazon DataZone now supports the TOOLING blueprint category on CreateEnvironmentBlueprint, UpdateEnvironmentBlueprint, GetEnvironmentBlueprint, and ListEnvironmentBlueprints, for custom tooling blueprints. CreateConnection now accepts roleArn in iamProperties. (591cd6f5)

client-elasticache: Added tagging support for ElastiCache Global DataStore. (0fa9da59)

client-marketplace-discovery: AWS Marketplace Discovery API now supports localized responses and SigV4a request signing. It returns new fulfillment details, including AMI architecture, EBS volume and security group information, SaaS quick-launch status, and SageMaker input and output MIME types. (510673e3)

client-redshift-data: Updates to the ListDatabases and WorkgroupName validation (218c24e1)

client-securityagent: Added support for Confluence export, enabling customers to publish security findings to Confluence pages. (81408527)

client-cloudwatch: This release adds Create, Get, Update, and DeleteResourceMetricsConfiguration to enable detailed metric collection for an AWS resource, and adds UpdateOTelEnrichment plus include and exclude filters on StartOTelEnrichment so you can choose which metric namespaces CloudWatch enriches. (765cc1ce)

client-eventbridge: Adds a ManagedBy field to the DescribeEventBus and ListEventBuses responses, identifying the AWS service that created an event bus on your behalf. (28a639b2)

Tests

undici-http-handler: update bidi stream e2e test to nova-2-sonic model (#8313) (d9a37d9d)

... (truncated)

Changelog

Sourced from @aws-sdk/client-s3's changelog.

3.1141.0 (2026-09-25)

Note: Version bump only for package @aws-sdk/client-s3

3.1140.0 (2026-09-24)

Note: Version bump only for package @aws-sdk/client-s3

3.1139.0 (2026-09-23)

Note: Version bump only for package @aws-sdk/client-s3

3.1138.0 (2026-09-22)

Note: Version bump only for package @aws-sdk/client-s3

3.1137.0 (2026-09-21)

Note: Version bump only for package @aws-sdk/client-s3

3.1136.0 (2026-09-18)

Note: Version bump only for package @aws-sdk/client-s3

3.1135.0 (2026-09-17)

... (truncated)

Commits

5bc8d9a Publish v3.1141.0
6050a38 Publish v3.1140.0
03d54a8 Publish v3.1139.0
c68e50e Publish v3.1138.0
9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
6b43247 Publish v3.1137.0
d6b94db Publish v3.1136.0
2d5f18d Publish v3.1135.0
0d6310b Publish v3.1134.0
615a1ca Publish v3.1133.0
Additional commits viewable in compare view

Updates @aws-sdk/s3-request-presigner from 3.1097.0 to 3.1141.0

Release notes

Sourced from @aws-sdk/s3-request-presigner's releases.

v3.1141.0

3.1141.0(2026-09-25)

Chores

codegen: smithy-aws-typescript-codegen 0.54.0 (#8314) (ad80ce3e)

New Features

client-connect: Agent Privacy During Hold is a new privacy capability for Amazon Connect Voice that prevents agent audio from being captured in call recordings or Contact Lens conversational analytics during hold. When enabled, agents are automatically muted on entering hold and unmuted on resuming the contact (03527f9e)

client-qconnect: Release shapes for the proactive agentic recommendations and the multi-knowledge base search features. Increases the maximum length of QuickResponseContent. (e008332b)

client-bedrock-agent: Adds support for calling VPC configuration API's in Bedrock. These configurations allow the use of On Prem connectors in Bedrock Managed Knowledge bases (18524dc6)

client-mediaconnect: This release adds support for RTMP push router outputs in AWS Elemental MediaConnect. (5bd8d80b)

client-securityagent: This release adds the ListActorMessages operation, which returns the multi-factor authentication messages received at an actor's server-generated email address (10e53d50)

client-arc-region-switch: Adds a service quota checker to Region switch to verify quota parity between your primary and standby Region, and automatically submit quota limit increases. Adds an optional EC2 Auto Scaling and ECS setting that waits for instances or tasks in the scaled-up Region to be healthy in target groups. (cca33e38)

client-bedrock-agentcore-control: Amazon Bedrock AgentCore Payments now supports credential rotation for payment connectors, letting you rotate API and wallet secrets for Quick Create payment auths from the console. This release also adds Type and Creation type columns to the payment managers views. (adca591f)

client-neptune-graph: Add GraphIdentifier filter for ListImportTasks (9b9aea9b)

client-rekognition: This release adds support for Feedback and Metadata in the GetFaceLivenessSessionResults response. Feedback returns codes explaining why a Face Liveness check produced its result. Metadata includes the client SDK type. (0831c361)

client-glue: add support for table level federation (a44458b7)

client-wellarchitected: This change releases the Well-Architected Agent, a generative AI service that analyzes a customer's AWS environment and delivers personalized, prioritized recommendations across cost, security, performance, and resilience. (d0656586)

For list of updated packages, view updated-packages.md in assets-3.1141.0.zip

v3.1140.0

3.1140.0(2026-09-24)

Documentation Changes

client-route53resolver: Documentation updates for Route 53 Resolver. Clarifies which Outpost Resolver operations apply to first-generation AWS Outposts and that Resolver is managed automatically on second-generation Outposts. Adds Local Network Interface subnet compatibility notes for Resolver endpoints. (b4432aba)

client-iot: Fixed ListV2LoggingLevels and DeleteV2LoggingLevel documentation to include all supported target-types (4dcf76d5)

New Features

clients: update client endpoints as of 2026-09-24 (29a8566c)

client-eventbridgev2: Introducing Amazon EventBridge enhanced Custom event bus, a new shareable event bus for organizational-scale event-driven applications feature ordered delivery, deduplication, open event formats, and cross-account bus sharing. (69fbe6a2)

client-datazone: Amazon DataZone now supports the TOOLING blueprint category on CreateEnvironmentBlueprint, UpdateEnvironmentBlueprint, GetEnvironmentBlueprint, and ListEnvironmentBlueprints, for custom tooling blueprints. CreateConnection now accepts roleArn in iamProperties. (591cd6f5)

client-elasticache: Added tagging support for ElastiCache Global DataStore. (0fa9da59)

client-marketplace-discovery: AWS Marketplace Discovery API now supports localized responses and SigV4a request signing. It returns new fulfillment details, including AMI architecture, EBS volume and security group information, SaaS quick-launch status, and SageMaker input and output MIME types. (510673e3)

client-redshift-data: Updates to the ListDatabases and WorkgroupName validation (218c24e1)

client-securityagent: Added support for Confluence export, enabling customers to publish security findings to Confluence pages. (81408527)

client-cloudwatch: This release adds Create, Get, Update, and DeleteResourceMetricsConfiguration to enable detailed metric collection for an AWS resource, and adds UpdateOTelEnrichment plus include and exclude filters on StartOTelEnrichment so you can choose which metric namespaces CloudWatch enriches. (765cc1ce)

client-eventbridge: Adds a ManagedBy field to the DescribeEventBus and ListEventBuses responses, identifying the AWS service that created an event bus on your behalf. (28a639b2)

Tests

undici-http-handler: update bidi stream e2e test to nova-2-sonic model (#8313) (d9a37d9d)

... (truncated)

Changelog

Sourced from @aws-sdk/s3-request-presigner's changelog.

3.1141.0 (2026-09-25)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1140.0 (2026-09-24)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1139.0 (2026-09-23)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1138.0 (2026-09-22)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1137.0 (2026-09-21)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1136.0 (2026-09-18)

Note: Version bump only for package @aws-sdk/s3-request-presigner

3.1135.0 (2026-09-17)

... (truncated)

Commits

5bc8d9a Publish v3.1141.0
6050a38 Publish v3.1140.0
03d54a8 Publish v3.1139.0
c68e50e Publish v3.1138.0
9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
6b43247 Publish v3.1137.0
d6b94db Publish v3.1136.0
2d5f18d Publish v3.1135.0
0d6310b Publish v3.1134.0
615a1ca Publish v3.1133.0
Additional commits viewable in compare view

Updates @nestjs/apollo from 13.4.2 to 13.4.5

Release notes

Sourced from @nestjs/apollo's releases.

v13.4.5

13.4.5 (2026-08-17)

Enhancements

graphql

#4054 feat(graphql): emit graphql descriptions as tsdoc comments (@joelluijmes)

Committers: 1

Joël Luijmes (@joelluijmes)

Commits

b6e5d43 v13.4.5
c692a52 Merge pull request #4010 from nestjs/renovate/nest-monorepo
e5e88ff test: update serialized graph snapshot for @nestjs/core 11.2.1
8318ee3 chore(deps): update nest monorepo to v11.2.1
9657c10 Merge pull request #4034 from nestjs/renovate/graphql-17.x
15bc316 Merge remote-tracking branch 'origin/master' into pr-4034
9ab7053 fix: support graphql v17 alongside v16
7687fc6 Merge pull request #4078 from GiHoon1123/fix-3731-switch-to-tinyglobby
130c093 Merge remote-tracking branch 'origin/master' into pr-4034
1d9e7ad Merge branch 'master' into fix-3731-switch-to-tinyglobby
Additional commits viewable in compare view

Updates @nestjs/common from 11.1.28 to 11.2.6

Release notes

Sourced from @nestjs/common's releases.

v11.2.6

What's changed

@nestjs/platform-express

fix(deps): update dependency multer to v2.4.0 [security] — fixes CVE-2026-88932 (GHSA-3pph-fpjx-jg34)

fix(express): map multer errors by code instead of message — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

... (truncated)

Commits

c07cfb0 v11.2.6
e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
7ebaa88 chore: drop skip instrumentation - duplicated api
4593b0a fix(core): preserve middleware arity #17554
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
b2e7fb5 Merge pull request #17469 from nestjs/feat/sse-signal
Additional commits viewable in compare view

Updates @nestjs/core from 11.1.28 to 11.2.6

Release notes

Sourced from @nestjs/core's releases.

v11.2.6

What's changed

@nestjs/platform-express

fix(deps): update dependency multer to v2.4.0 [security] — fixes CVE-2026-88932 (GHSA-3pph-fpjx-jg34)

fix(express): map multer errors by code instead of message — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

... (truncated)

Commits

c07cfb0 v11.2.6
e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
e12b47b fix(core): circular durable providers issue #17562
7e65752 chore(release): publish v11.2.2 release
7ebaa88 chore: drop skip instrumentation - duplicated api
4593b0a fix(core): preserve middleware arity #17554
35a29cc fix(core): instrument middleware fallback issue
4535f43 chore(release): publish v11.2.1 release
Additional commits viewable in compare view

Updates @nestjs/graphql from 13.4.2 to 13.4.5

Release notes

Sourced from @nestjs/graphql's releases.

v13.4.5

13.4.5 (2026-08-17)

Enhancements

graphql

#4054 feat(graphql): emit graphql descriptions as tsdoc comments (@joelluijmes)

Committers: 1

Joël Luijmes (@joelluijmes)

Commits

b6e5d43 v13.4.5
c692a52 Merge pull request #4010 from nestjs/renovate/nest-monorepo
e5e88ff test: update serialized graph snapshot for @nestjs/core 11.2.1
8318ee3 chore(deps): update nest monorepo to v11.2.1
9657c10 Merge pull request #4034 from nestjs/renovate/graphql-17.x
15bc316 Merge remote-tracking branch 'origin/master' into pr-4034
9ab7053 fix: support graphql v17 alongside v16
7687fc6 Merge pull request #4078 from GiHoon1123/fix-3731-switch-to-tinyglobby
130c093 Merge remote-tracking branch 'origin/master' into pr-4034
1d9e7ad Merge branch 'master' into fix-3731-switch-to-tinyglobby
Additional commits viewable in compare view

Updates @nestjs/platform-fastify from 11.1.28 to 11.2.6

Release notes

Sourced from @nestjs/platform-fastify's releases.

v11.2.6

What's changed

@nestjs/platform-express

fix(deps): update dependency multer to v2.4.0 [security] — fixes CVE-2026-88932 (GHSA-3pph-fpjx-jg34)

fix(express): map multer errors by code instead of message — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

... (truncated)

Commits

c07cfb0 v11.2.6
e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
5226fe0 fix(platform-fastify): absolute-form request target middleware bypass
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
eac10cd Merge pull request #17162 from gacardinal/feat/query-http-method
674ac31 Merge pull request #17455 from nestjs/renovate/fastify-5.x
Additional commits viewable in compare view

Updates @nestjs/platform-socket.io from 11.1.28 to 11.2.6

Release notes

Sourced from @nestjs/platform-socket.io's releases.

v11.2.6

What's changed

@nestjs/platform-express

fix(deps): update dependency multer to v2.4.0 [security] — fixes CVE-2026-88932 (GHSA-3pph-fpjx-jg34)

fix(express): map multer errors by code instead of message — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

... (truncated)

Commits

c07cfb0 v11.2.6
e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
03587a1 chore(release): publish v11.1.29 release
92bc05d chore: update readme
See full diff in compare view

Updates @nestjs/websockets from 11.1.28 to 11.2.6

Release notes

Sourced from @nestjs/websockets's releases.

v11.2.6

What's changed

@nestjs/platform-express

fix(deps): update dependency multer to v2.4.0 [security] — fixes CVE-2026-88932 (GHSA-3pph-fpjx-jg34)

fix(express): map multer errors by code instead of message — backport of #17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

... (truncated)

Commits

c07cfb0 v11.2.6
e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
03587a1 chore(release): publish v11.1.29 release
92bc05d chore: update readme
See full diff in compare view

Updates fastify from 5.10.0 to 5.12.5

Release notes

Sourced from fastify's releases.

v5.12.5

⚠️ Security release

Fix for GHSA-4mh8-r7rc-xpvc

What's Changed

[Backport 5.x] perf: reduce content-type parser overhead by @github-actions[bot] in Description has been truncated

Bumps the safe-updates group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1097.0` | `3.1141.0` | | [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1097.0` | `3.1141.0` | | [@nestjs/apollo](https://github.com/nestjs/graphql) | `13.4.2` | `13.4.5` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.28` | `11.2.6` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.28` | `11.2.6` | | [@nestjs/graphql](https://github.com/nestjs/graphql) | `13.4.2` | `13.4.5` | | [@nestjs/platform-fastify](https://github.com/nestjs/nest/tree/HEAD/packages/platform-fastify) | `11.1.28` | `11.2.6` | | [@nestjs/platform-socket.io](https://github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io) | `11.1.28` | `11.2.6` | | [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `11.1.28` | `11.2.6` | | [fastify](https://github.com/fastify/fastify) | `5.10.0` | `5.12.5` | | [graphql-scalars](https://github.com/Urigo/graphql-scalars) | `1.25.0` | `1.26.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` | | [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` | | [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.5` | | [socket.io](https://github.com/socketio/socket.io) | `4.8.3` | `4.8.4` | | [ws](https://github.com/websockets/ws) | `8.21.1` | `8.22.0` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.1.28` | `11.2.6` | | [@types/luxon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/luxon) | `3.7.2` | `3.7.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.13.3` | `24.19.0` | | [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.20.0` | `8.23.1` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` | Updates `@aws-sdk/client-s3` from 3.1097.0 to 3.1141.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1141.0/clients/client-s3) Updates `@aws-sdk/s3-request-presigner` from 3.1097.0 to 3.1141.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1141.0/packages/s3-request-presigner) Updates `@nestjs/apollo` from 13.4.2 to 13.4.5 - [Release notes](https://github.com/nestjs/graphql/releases) - [Commits](nestjs/graphql@v13.4.2...v13.4.5) Updates `@nestjs/common` from 11.1.28 to 11.2.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.6/packages/common) Updates `@nestjs/core` from 11.1.28 to 11.2.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.6/packages/core) Updates `@nestjs/graphql` from 13.4.2 to 13.4.5 - [Release notes](https://github.com/nestjs/graphql/releases) - [Commits](nestjs/graphql@v13.4.2...v13.4.5) Updates `@nestjs/platform-fastify` from 11.1.28 to 11.2.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.6/packages/platform-fastify) Updates `@nestjs/platform-socket.io` from 11.1.28 to 11.2.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.6/packages/platform-socket.io) Updates `@nestjs/websockets` from 11.1.28 to 11.2.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.6/packages/websockets) Updates `fastify` from 5.10.0 to 5.12.5 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.10.0...v5.12.5) Updates `graphql-scalars` from 1.25.0 to 1.26.0 - [Release notes](https://github.com/Urigo/graphql-scalars/releases) - [Changelog](https://github.com/graphql-hive/graphql-scalars/blob/master/CHANGELOG.md) - [Commits](graphql-hive/graphql-scalars@v1.25.0...v1.26.0) Updates `pg` from 8.22.0 to 8.23.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) Updates `@types/pg` from 8.20.0 to 8.23.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg) Updates `sharp` from 0.35.3 to 0.35.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.3...v0.35.5) Updates `socket.io` from 4.8.3 to 4.8.4 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io@4.8.3...socket.io@4.8.4) Updates `ws` from 8.21.1 to 8.22.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.21.1...8.22.0) Updates `@nestjs/testing` from 11.1.28 to 11.2.6 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.6/packages/testing) Updates `@types/luxon` from 3.7.2 to 3.7.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/luxon) Updates `@types/node` from 24.13.3 to 24.19.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/pg` from 8.20.0 to 8.23.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg) Updates `prettier` from 3.9.6 to 3.9.9 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.9) --- updated-dependencies: - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1141.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@aws-sdk/s3-request-presigner" dependency-version: 3.1141.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@nestjs/apollo" dependency-version: 13.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-updates - dependency-name: "@nestjs/common" dependency-version: 11.2.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@nestjs/core" dependency-version: 11.2.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@nestjs/graphql" dependency-version: 13.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-updates - dependency-name: "@nestjs/platform-fastify" dependency-version: 11.2.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@nestjs/platform-socket.io" dependency-version: 11.2.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@nestjs/websockets" dependency-version: 11.2.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: fastify dependency-version: 5.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: graphql-scalars dependency-version: 1.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@types/pg" dependency-version: 8.23.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: sharp dependency-version: 0.35.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-updates - dependency-name: socket.io dependency-version: 4.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: safe-updates - dependency-name: ws dependency-version: 8.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@nestjs/testing" dependency-version: 11.2.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@types/luxon" dependency-version: 3.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-updates - dependency-name: "@types/node" dependency-version: 24.19.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: "@types/pg" dependency-version: 8.23.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: safe-updates - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: safe-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

Navigation Menu

Repository navigation

Bump the safe-updates group across 1 directory with 20 updates - #38

Bump the safe-updates group across 1 directory with 20 updates#38
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/safe-updates-699fac2af4

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

v3.1141.0

3.1141.0(2026-09-25)

Chores

New Features

v3.1140.0

3.1140.0(2026-09-24)

Documentation Changes

New Features

Tests

3.1141.0 (2026-09-25)

3.1140.0 (2026-09-24)

3.1139.0 (2026-09-23)

3.1138.0 (2026-09-22)

3.1137.0 (2026-09-21)

3.1136.0 (2026-09-18)

3.1135.0 (2026-09-17)

v3.1141.0

3.1141.0(2026-09-25)

Chores

New Features

v3.1140.0

3.1140.0(2026-09-24)

Documentation Changes

New Features

Tests

3.1141.0 (2026-09-25)

3.1140.0 (2026-09-24)

3.1139.0 (2026-09-23)

3.1138.0 (2026-09-22)

3.1137.0 (2026-09-21)

3.1136.0 (2026-09-18)

3.1135.0 (2026-09-17)

v13.4.5

13.4.5 (2026-08-17)

Enhancements

Committers: 1

v11.2.6

What's changed

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.1

What's Changed

v11.2.0

What's Changed

v11.2.6

What's changed

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.1

What's Changed

v11.2.0

What's Changed

v13.4.5

13.4.5 (2026-08-17)

Enhancements

Committers: 1

v11.2.6

What's changed

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed