chore(deps): bump the production group with 10 updates by dependabot[bot] · Pull Request #12 · labcabrera/rmu-api-items

dependabot · 2026-11-14T03:46:10Z

Bumps the production group with 10 updates:

Package	From	To
@nestjs/common	`12.3.2`	`12.4.2`
@nestjs/config	`12.0.1`	`12.1.1`
@nestjs/core	`12.3.2`	`12.4.2`
@nestjs/microservices	`12.3.2`	`12.4.2`
@nestjs/mongoose	`12.0.0`	`12.0.1`
@nestjs/passport	`12.0.0`	`12.0.1`
@nestjs/platform-express	`12.3.2`	`12.4.2`
@nestjs/swagger	`12.1.0`	`12.1.1`
joi	`18.3.1`	`18.3.2`
mongoose	`9.11.4`	`9.12.1`

Updates @nestjs/common from 12.3.2 to 12.4.2

Release notes

Sourced from @nestjs/common's releases.

v12.4.1 (2026-11-09)

Features

platform-node

#18435 feat(node): inject requests into the node adapter like the fastify one (@thekhegay)

#18439 feat(node): set req.route on the node adapter like express does (@thekhegay)

Bug fixes

core

#18385 fix(core): roll back modules on failed lazy load (@Asadshah7950)

Enhancements

common, core

#18429 fix(core,common): warn when decorator metadata is missing (@kamilmysliwiec)

Dependencies

platform-ws

#18468 chore(deps): bump ws from 8.22.0 to 8.22.1 (@dependabot[bot])

Committers: 8

Abdellatif Anaflous (@hktitof)

Asad Ali Shah (@Asadshah7950)

G (@gjija)

Kamil Mysliwiec (@kamilmysliwiec)

Maksym Lyskov (@maxymlyskov)

Roman Khegay (@thekhegay)

Thiago Nascimento (@ThiagoACNascimento)

WooSeung Kim (@beyondwin)

v12.4.0 (2026-11-06)

Features

platform-node

#18396 feat(node): let the node adapter set locals for every view (@thekhegay)

Bug fixes

microservices

#18418 fix(microservices): ignore an mqtt server's own replies under wildcards (@pavstev)

#18413 fix(microservices): reach handlers whose string pattern reads as json (@pavstev)

#18392 fix(microservices): forward grpc call options on request streams (@DenisCDev)

#18393 fix(microservices): await the mqtt close and reset the client state (@hktitof)

common

#18419 fix(common): keep the fields of grouped item errors in parse array pipe (@pavstev)

#18402 fix(common): keep console logger from mutating the caller options (@pavstev)

platform-node

#18417 fix(node): omit the Content-Length of a redirect with a Transfer-Encoding (@hktitof)

#18415 fix(node): give each route that shares a path shape its own params (@pavstev)

#18372 fix(node): strip trailing slashes when resolving view names (@saiyam-jain-dev)

#18403 fix(node): omit content-length when transfer-encoding is set (@pavstev)

#18395 fix(node): render with eta, liquidjs and art-template (@thekhegay)

... (truncated)

Commits

422a1d3 chore(release): publish v12.4.2 release
3737faf chore(release): publish v12.4.1 release
7c4933f chore: update readme
a3366f5 fix(common): keep the loaded packages while validation pipes are created (#18...
9430227 docs(readme): say nest goes from one file to enterprise-grade systems (#18436)
d329990 Merge remote-tracking branch 'refs/remotes/origin/master'
ec3ade8 chore: update readme
7ef0a0b fix(core,common): warn when decorator metadata is missing (#18429)
c0e503b chore(release): publish v12.4.0 release
cef9dbb feat(core,common): send a web response or stream a handler returns (#18427)
Additional commits viewable in compare view

Updates @nestjs/config from 12.0.1 to 12.1.1

Release notes

Sourced from @nestjs/config's releases.

Release 12.1.1

Dependencies

fix(deps): update dependency es-toolkit to v1.53.1 in nestjs/config#2470

Full Changelog: nestjs/config@12.1.0...12.1.1

Release 12.1.0

Security

This release fixes several security issues in how ConfigService resolves property paths and how ConfigModule.forRoot() loads and validates environment variables. See GHSA-q989-84g5-qg72 for details. Upgrading is recommended.

Behavior changes

Some fixes change what ConfigService returns. Please review them before upgrading:

Property paths only resolve members a configuration object defines (own properties and members of your own classes). Members inherited from built-ins resolve to undefined, e.g. get('database.toString'), get('constructor.prototype') or get('cert.length') for a Buffer. set() never writes through them, and paths through __proto__, constructor or prototype are ignored.

Validated variables take precedence:

A variable that the validator maps to undefined is no longer served from process.env. get(key, defaultValue) returns the default.

A variable that a validationSchema declares and removes (e.g. Joi .strip()) is no longer merged back. Undeclared variables are still kept.

With skipProcessEnv: true and a validationSchema, undeclared variables from process.env are no longer served. Declared ones still are. A validate function's output is served as it is.

With validatePredefined: false, a predefined variable now takes precedence over a different value from the env file, and get() returns it as it is.

A second validated forRoot() no longer replaces the converted values of another one.

expandVariables:

Expanded values are assigned to process.env after validation, not before.

Several env files are expanded once, so $ and \$ in earlier files are no longer expanded again.

With override: true, a variable's reference to itself (e.g. PATH=/opt/bin:$PATH) expands to its previous value.

Env files: a value containing a NUL character now fails startup instead of being truncated in process.env. __proto__ keys returned by a custom parser are ignored.

ConfigService.set():

Dependent variables are re-expanded from the definitions loaded at startup. The env files are not read again.

Values passed to earlier set() calls and variables set in the environment are kept.

The expandVariables.processEnv target is honored.

A re-expanded value longer than 128 KiB throws.

Load order:

ConfigService from a plain imports: [ConfigModule] or ConfigModule.forFeature() is provided once forRoot() has merged its load factories.

ConfigModule.envVariablesLoaded (used by ConditionalModule.registerWhen()) waits until every forRoot() in progress has loaded its environment variables.

Validation errors no longer include the rejected value: Joi pattern() messages leave it out, and a quoted value is replaced with [redacted].

Features

validate may be an async function. A rejected promise stops startup.

ConfigService.set() re-interpolates variables that depend on the changed key, including chains of references (#2463).

Bug fixes

override: true takes precedence when expanding variables (#2465).

get('_PROCESS_ENV_VALIDATED') no longer returns the internal snapshot of validated variables.

Deprecations

... (truncated)

Commits

c264bc8 chore(): release v12.1.1
0b7e9b2 chore: describe the package on npm (#2480)
55fca64 chore(deps): update dependency vite to v8.3.6 (#2479)
6d25d91 chore(deps): update dependency joi to v18.3.2 (#2478)
23283fe chore(deps): update node.js to v26 (#2472)
54c552b chore(deps): update node.js to v26 (#2471)
3baa646 fix(deps): update dependency es-toolkit to v1.53.1 (#2470)
09986c9 chore(deps): update dependency oxlint to v1.91.0 (#2476)
8d7ff2e chore(deps): update nest monorepo to v12.3.3 (#2477)
f2b2a3a chore(deps): update node.js to v24.22.2 (#2469)
Additional commits viewable in compare view

Updates @nestjs/core from 12.3.2 to 12.4.2

Release notes

Sourced from @nestjs/core's releases.

v12.4.1 (2026-11-09)

Features

platform-node

#18435 feat(node): inject requests into the node adapter like the fastify one (@thekhegay)

#18439 feat(node): set req.route on the node adapter like express does (@thekhegay)

Bug fixes

core

#18385 fix(core): roll back modules on failed lazy load (@Asadshah7950)

Enhancements

common, core

#18429 fix(core,common): warn when decorator metadata is missing (@kamilmysliwiec)

Dependencies

platform-ws

#18468 chore(deps): bump ws from 8.22.0 to 8.22.1 (@dependabot[bot])

Committers: 8

Abdellatif Anaflous (@hktitof)

Asad Ali Shah (@Asadshah7950)

G (@gjija)

Kamil Mysliwiec (@kamilmysliwiec)

Maksym Lyskov (@maxymlyskov)

Roman Khegay (@thekhegay)

Thiago Nascimento (@ThiagoACNascimento)

WooSeung Kim (@beyondwin)

v12.4.0 (2026-11-06)

Features

platform-node

#18396 feat(node): let the node adapter set locals for every view (@thekhegay)

Bug fixes

microservices

#18418 fix(microservices): ignore an mqtt server's own replies under wildcards (@pavstev)

#18413 fix(microservices): reach handlers whose string pattern reads as json (@pavstev)

#18392 fix(microservices): forward grpc call options on request streams (@DenisCDev)

#18393 fix(microservices): await the mqtt close and reset the client state (@hktitof)

common

#18419 fix(common): keep the fields of grouped item errors in parse array pipe (@pavstev)

#18402 fix(common): keep console logger from mutating the caller options (@pavstev)

platform-node

#18417 fix(node): omit the Content-Length of a redirect with a Transfer-Encoding (@hktitof)

#18415 fix(node): give each route that shares a path shape its own params (@pavstev)

#18372 fix(node): strip trailing slashes when resolving view names (@saiyam-jain-dev)

#18403 fix(node): omit content-length when transfer-encoding is set (@pavstev)

#18395 fix(node): render with eta, liquidjs and art-template (@thekhegay)

... (truncated)

Commits

422a1d3 chore(release): publish v12.4.2 release
df063e1 fix(core): release settlement refs once a signal settles (#18484)
3737faf chore(release): publish v12.4.1 release
7c4933f chore: update readme
5e9a90e fix(core): spread an array that follows a single value when merging (#18465)
445f825 fix(core): keep module ref get() and resolve() from mutating the options (#18...
85ec71b fix(core): run wildcard middleware on excluded routes of every version
51f8f11 fix(core): run the hooks of property dependencies first (#18460)
f6a2377 fix(core): run the hooks of a provider that overrides an alias (#18455)
0fd8642 fix(core): roll back modules on failed lazy load (#18385)
Additional commits viewable in compare view

Updates @nestjs/microservices from 12.3.2 to 12.4.2

Release notes

Sourced from @nestjs/microservices's releases.

v12.4.1 (2026-11-09)

Features

platform-node

#18435 feat(node): inject requests into the node adapter like the fastify one (@thekhegay)

#18439 feat(node): set req.route on the node adapter like express does (@thekhegay)

Bug fixes

core

#18385 fix(core): roll back modules on failed lazy load (@Asadshah7950)

Enhancements

common, core

#18429 fix(core,common): warn when decorator metadata is missing (@kamilmysliwiec)

Dependencies

platform-ws

#18468 chore(deps): bump ws from 8.22.0 to 8.22.1 (@dependabot[bot])

Committers: 8

Abdellatif Anaflous (@hktitof)

Asad Ali Shah (@Asadshah7950)

G (@gjija)

Kamil Mysliwiec (@kamilmysliwiec)

Maksym Lyskov (@maxymlyskov)

Roman Khegay (@thekhegay)

Thiago Nascimento (@ThiagoACNascimento)

WooSeung Kim (@beyondwin)

v12.4.0 (2026-11-06)

Features

platform-node

#18396 feat(node): let the node adapter set locals for every view (@thekhegay)

Bug fixes

microservices

#18418 fix(microservices): ignore an mqtt server's own replies under wildcards (@pavstev)

#18413 fix(microservices): reach handlers whose string pattern reads as json (@pavstev)

#18392 fix(microservices): forward grpc call options on request streams (@DenisCDev)

#18393 fix(microservices): await the mqtt close and reset the client state (@hktitof)

common

#18419 fix(common): keep the fields of grouped item errors in parse array pipe (@pavstev)

#18402 fix(common): keep console logger from mutating the caller options (@pavstev)

platform-node

#18417 fix(node): omit the Content-Length of a redirect with a Transfer-Encoding (@hktitof)

#18415 fix(node): give each route that shares a path shape its own params (@pavstev)

#18372 fix(node): strip trailing slashes when resolving view names (@saiyam-jain-dev)

#18403 fix(node): omit content-length when transfer-encoding is set (@pavstev)

#18395 fix(node): render with eta, liquidjs and art-template (@thekhegay)

... (truncated)

Commits

422a1d3 chore(release): publish v12.4.2 release
1aaeb09 fix(microservices): keep grpc from mutating the caller channel options (#18479)
3737faf chore(release): publish v12.4.1 release
7c4933f chore: update readme
15f6cb9 fix(microservices): ignore a kafka server's own replies under regexes (#18471)
d29f252 fix(microservices): route rmq requests with the pattern the server binds (#18...
acf191c fix(microservices): send grpc stream values from an async map (#18453)
7ad3829 fix(microservices): skip nil grpc metadata before call options (#18446)
9430227 docs(readme): say nest goes from one file to enterprise-grade systems (#18436)
ec3ade8 chore: update readme
Additional commits viewable in compare view

Updates @nestjs/mongoose from 12.0.0 to 12.0.1

Release notes

Sourced from @nestjs/mongoose's releases.

Release 12.0.1

Features

feat: support waiting for model init before resolving model providers by @skrtheboss in nestjs/mongoose#2883

Bug fixes

fix(core): call onConnectionCreate for lazy connections by @thekhegay in nestjs/mongoose#2933

Full Changelog: nestjs/mongoose@12.0.0...12.0.1

Commits

45d1988 chore(): release v12.0.1
08479ec chore: describe the package on npm (#2944)
21af03b chore(deps): update dependency vite to v8.3.6 (#2943)
e0889be chore(deps): update dependency mongoose to v9.12.0 (#2942)
1526eae chore(deps): update nest monorepo to v12.3.3 (#2941)
74edb4d chore(deps): update dependency oxlint to v1.91.0 (#2940)
62ba007 chore(deps): update dependency vitest to v5.1.0 (#2939)
b3bec92 chore(deps): update dependency release-it to v21.1.2 (#2938)
3896014 chore(deps): update nest monorepo to v12.3.2 (#2922)
929dc0d chore(deps): update dependency oxlint to v1.90.0 (#2927)
Additional commits viewable in compare view

Updates @nestjs/passport from 12.0.0 to 12.0.1

Release notes

Sourced from @nestjs/passport's releases.

Release 12.0.1

Bug fixes

fix(strategy): guard callback arity when validate is not on prototype by @RaphaelFakhri in nestjs/passport#2344

Full Changelog: nestjs/passport@12.0.0...12.0.1

Commits

be5fdd9 chore(): release v12.0.1
4f657b5 chore: describe the package on npm (#2353)
e714145 chore(deps): update nest monorepo to v12.3.3 (#2352)
cf6172d chore(deps): update dependency oxlint to v1.91.0 (#2351)
c4f95cf chore(deps): update dependency rimraf to v6.1.4 (#2350)
6c1faaf chore(deps): update vitest monorepo to v5.1.0 (#2349)
e2056ed chore(deps): update dependency release-it to v21.1.2 (#2348)
8c40410 chore(deps): update nest monorepo to v12.3.2 (#2338)
39cfd40 chore(deps): update dependency oxlint to v1.90.0 (#2337)
d287603 chore(deps): update dependency lint-staged to v17.6.0 (#2336)
Additional commits viewable in compare view

Updates @nestjs/platform-express from 12.3.2 to 12.4.2

Release notes

Sourced from @nestjs/platform-express's releases.

v12.4.1 (2026-11-09)

Features

platform-node

#18435 feat(node): inject requests into the node adapter like the fastify one (@thekhegay)

#18439 feat(node): set req.route on the node adapter like express does (@thekhegay)

Bug fixes

core

#18385 fix(core): roll back modules on failed lazy load (@Asadshah7950)

Enhancements

common, core

#18429 fix(core,common): warn when decorator metadata is missing (@kamilmysliwiec)

Dependencies

platform-ws

#18468 chore(deps): bump ws from 8.22.0 to 8.22.1 (@dependabot[bot])

Committers: 8

Abdellatif Anaflous (@hktitof)

Asad Ali Shah (@Asadshah7950)

G (@gjija)

Kamil Mysliwiec (@kamilmysliwiec)

Maksym Lyskov (@maxymlyskov)

Roman Khegay (@thekhegay)

Thiago Nascimento (@ThiagoACNascimento)

WooSeung Kim (@beyondwin)

v12.4.0 (2026-11-06)

Features

platform-node

#18396 feat(node): let the node adapter set locals for every view (@thekhegay)

Bug fixes

microservices

#18418 fix(microservices): ignore an mqtt server's own replies under wildcards (@pavstev)

#18413 fix(microservices): reach handlers whose string pattern reads as json (@pavstev)

#18392 fix(microservices): forward grpc call options on request streams (@DenisCDev)

#18393 fix(microservices): await the mqtt close and reset the client state (@hktitof)

common

#18419 fix(common): keep the fields of grouped item errors in parse array pipe (@pavstev)

#18402 fix(common): keep console logger from mutating the caller options (@pavstev)

platform-node

#18417 fix(node): omit the Content-Length of a redirect with a Transfer-Encoding (@hktitof)

#18415 fix(node): give each route that shares a path shape its own params (@pavstev)

#18372 fix(node): strip trailing slashes when resolving view names (@saiyam-jain-dev)

#18403 fix(node): omit content-length when transfer-encoding is set (@pavstev)

#18395 fix(node): render with eta, liquidjs and art-template (@thekhegay)

... (truncated)

Commits

422a1d3 chore(release): publish v12.4.2 release
0e135d8 fix(express,node): keep the multer error as the cause of 4xx (#18478)
3737faf chore(release): publish v12.4.1 release
7c4933f chore: update readme
56e2d25 fix(express,fastify,node): keep the original error as the cause of 4xx (#18447)
2a1ba09 fix(express,fastify): omit content-length when transfer-encoding is set (#18454)
9430227 docs(readme): say nest goes from one file to enterprise-grade systems (#18436)
ec3ade8 chore: update readme
c0e503b chore(release): publish v12.4.0 release
79c05a5 chore: describe the packages on npm (#18426)
Additional commits viewable in compare view

Updates @nestjs/swagger from 12.1.0 to 12.1.1

Release notes

Sourced from @nestjs/swagger's releases.

Release 12.1.1

Bug fixes

fix(nullable): emit numeric exclusive bounds in 3.1 documents by @kkatalz in nestjs/swagger#4254

fix(schema): preserve explicit type when schema combinator is declared by @helmipradita in nestjs/swagger#4250

fix(api-link): link to the operation id set with @ApiOperation by @RaphaelFakhri in nestjs/swagger#4252

fix(plugin): keep @example values as strings for optional string properties by @kkatalz in nestjs/swagger#4246

fix(schema): move openapi 3.1 keywords of parameters into the schema by @SiKreuz in nestjs/swagger#4243

fix(scanner): strip dynamic defaults from operation schemas by @mwawacek in nestjs/swagger#4244

fix(explorer): merge headers declared on both controller and method by @mwawacek in nestjs/swagger#4240

fix(schema): keep explicit items of array parameters by @mwawacek in nestjs/swagger#4241

fix(schema): document arrays of bigint properties as arrays by @mwawacek in nestjs/swagger#4239

fix(api-param): document array types written as a tuple by @mwawacek in nestjs/swagger#4237

fix(api-header): keep falsy example values by @mwawacek in nestjs/swagger#4236

fix(schema): move length constraints of array parameters to the items by @mwawacek in nestjs/swagger#4235

fix(document-builder): normalise global response types and descriptions by @kkatalz in nestjs/swagger#4233

Dependencies

fix(deps): update dependency es-toolkit to v1.53.1 in nestjs/swagger#4208

fix(deps): update dependency swagger-ui-dist to v5.34.1 in nestjs/swagger#4228

Full Changelog: nestjs/swagger@12.1.0...12.1.1

Commits

fbb5cbc chore(): release v12.1.1
427db4c chore: describe the package on npm (#4255)
74f4b04 chore(deps): update nest monorepo to v12.3.3 (#4248)
855e6f3 chore(deps): update dependency vite to v8.3.6 (#4253)
54b8eb7 fix(nullable): emit numeric exclusive bounds in 3.1 documents (#4254)
d50c756 fix(schema): preserve explicit type when schema combinator is declared (#4250)
c151d1c fix(api-link): link to the operation id set with @ApiOperation (#4252)
60d4676 chore(deps): update dependency @fastify/static to v10.1.10 (#4247)
1a61cc6 fix(plugin): keep @example values as strings for optional string properties (...
4506fbf chore(renovate): migrate the renovate config (#4211)
Additional commits viewable in compare view

Updates joi from 18.3.1 to 18.3.2

Commits

7cfb3ce 18.3.2
4a42179 Merge pull request #3169 from hapijs/fix/linear-unique
0154b7b fix: make unique() linear on objects
See full diff in compare view

Updates mongoose from 9.11.4 to 9.12.1

Release notes

Sourced from mongoose's releases.

9.12.1 / 2026-11-09

perf(update): avoid quadratic ancestor lookup in update validators and validate nested array subdocs once #16586 https://github.com/Re-cool

perf: keep lib/ source within Latin-1 #16681 orgads

perf(map): avoid quadratic concat() when creating a MongooseMap from an object #16677 ptweezy

fix(array): keep earlier pushed values when push() is called again with $each #16619 #16618 maxymlyskov

fix(model+query): handle inherited read preference and read concern on cloned queries #16668 #16632

fix(timestamps): set timestamps on subdocs pushed via array filters #16615 #8809 vaidehi-snk

fix(model): validate paths under a nested path passed to Model.validate() #16653 NotAFlightRisk

fix(update): skip array-level validators for $pull with $in #16666 AnkitKumar61

fix(cursor): finish destruction after terminal initialization #16612 IbrahimHafez1

9.12.0 / 2026-11-04

feat: upgrade to mongodb driver 7.8 #16772 #16667

perf: improve for document arrays: cache paths with defaults and schemas with select paths; avoid unnecessary $isModified() lookup #16595

fix: make recompileSchema recompute derived caches and delay _preCompile() until an actual model is compiled (not subdocs or doc arrays) #16595

fix(array): compare UUIDs by value in indexOf() so pull() and addToSet() work #16606 luantaraschi

docs(query): remove unused use$geoWithin docs and property #16589 #16583

Changelog

Sourced from mongoose's changelog.

9.12.1 / 2026-11-09

perf(update): avoid quadratic ancestor lookup in update validators and validate nested array subdocs once #16586 https://github.com/Re-cool

perf: keep lib/ source within Latin-1 #16681 orgads

perf(map): avoid quadratic concat() when creating a MongooseMap from an object #16677 ptweezy

fix(array): keep earlier pushed values when push() is called again with $each #16619 #16618 maxymlyskov

fix(model+query): handle inherited read preference and read concern on cloned queries #16668 #16632

fix(timestamps): set timestamps on subdocs pushed via array filters #16615 #8809 vaidehi-snk

fix(model): validate paths under a nested path passed to Model.validate() #16653 NotAFlightRisk

fix(update): skip array-level validators for $pull with $in #16666 AnkitKumar61

fix(cursor): finish destruction after terminal initialization #16612 IbrahimHafez1

9.12.0 / 2026-11-04

feat: upgrade to mongodb driver 7.8 #16772 #16667

perf: improve for document arrays: cache paths with defaults and schemas with select paths; avoid unnecessary $isModified() lookup #16595

fix: make recompileSchema recompute derived caches and delay _preCompile() until an actual model is compiled (not subdocs or doc arrays) #16595

fix(array): compare UUIDs by value in indexOf() so pull() and addToSet() work #16606 luantaraschi

docs(query): remove unused use$geoWithin docs and property #16589 #16583

9.11.5 / 2026-11-03

fix(query): pass explain verbosity to the driver cursor in find() #16635 jasontd92

fix(map): support ObjectId keys in MongooseMap#has() NgoQuocViet2001

fix(schema): clear enumValues when enum validator is removed with enum(false) #16631 Enesuygurs

fix: respect disabled updatedAt in pipeline updates #16642 #16641 ItsM0rty

fix: make schema clone() copy $timestamps #16651 #16650 Oleksii-Pavliuk

fix(model): preserve WriteError instances in insertMany() writeErrors #16608 #16607 Majny

fix: bump sift -> 17.1.4 rishabhnehra

docs(production): add production indexes guide #16627

docs(ask-ai): send session cookie and continue stored conversations #16652 nlarew

8.24.8 / 2026-11-02

fix(schema): remove map paths cleanly, including maps under nested paths (backport to 8.x) #16625 #16461 #16457 mrityunjay-pandey

fix(schema): keep the map value schematype a single object when cloning (backport to 8.x) #16624 #16473 mrityunjay-pandey

fix(map): support ObjectId keys in MongooseMap#has() (backport to 8.x #16634 mrityunjay-pandey

fix(hydration): use the doc model for looking up a ref (backport to 8.x) #16623 #16453 mrityunjay-pandey

fix(document): replace {MODEL} in custom cast error messages from document validation (backport to 8.x) #16622 #16480 mrityunjay-pandey

fix(schema): run setters declared on the union path itself (backport to 8.x) #16621 #16528 mrityunjay-pandey

Commits

6f90b9b chore: release 9.12.1
b9fbdbd Merge pull request

Bumps the production group with 10 updates: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `12.3.2` | `12.4.2` | | [@nestjs/config](https://github.com/nestjs/config) | `12.0.1` | `12.1.1` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `12.3.2` | `12.4.2` | | [@nestjs/microservices](https://github.com/nestjs/nest/tree/HEAD/packages/microservices) | `12.3.2` | `12.4.2` | | [@nestjs/mongoose](https://github.com/nestjs/mongoose) | `12.0.0` | `12.0.1` | | [@nestjs/passport](https://github.com/nestjs/passport) | `12.0.0` | `12.0.1` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `12.3.2` | `12.4.2` | | [@nestjs/swagger](https://github.com/nestjs/swagger) | `12.1.0` | `12.1.1` | | [joi](https://github.com/hapijs/joi) | `18.3.1` | `18.3.2` | | [mongoose](https://github.com/Automattic/mongoose) | `9.11.4` | `9.12.1` | Updates `@nestjs/common` from 12.3.2 to 12.4.2 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.2/packages/common) Updates `@nestjs/config` from 12.0.1 to 12.1.1 - [Release notes](https://github.com/nestjs/config/releases) - [Commits](nestjs/config@12.0.1...12.1.1) Updates `@nestjs/core` from 12.3.2 to 12.4.2 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.2/packages/core) Updates `@nestjs/microservices` from 12.3.2 to 12.4.2 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.2/packages/microservices) Updates `@nestjs/mongoose` from 12.0.0 to 12.0.1 - [Release notes](https://github.com/nestjs/mongoose/releases) - [Commits](nestjs/mongoose@12.0.0...12.0.1) Updates `@nestjs/passport` from 12.0.0 to 12.0.1 - [Release notes](https://github.com/nestjs/passport/releases) - [Commits](nestjs/passport@12.0.0...12.0.1) Updates `@nestjs/platform-express` from 12.3.2 to 12.4.2 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.2/packages/platform-express) Updates `@nestjs/swagger` from 12.1.0 to 12.1.1 - [Release notes](https://github.com/nestjs/swagger/releases) - [Commits](nestjs/swagger@12.1.0...12.1.1) Updates `joi` from 18.3.1 to 18.3.2 - [Commits](hapijs/joi@v18.3.1...v18.3.2) Updates `mongoose` from 9.11.4 to 9.12.1 - [Release notes](https://github.com/Automattic/mongoose/releases) - [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md) - [Commits](Automattic/mongoose@9.11.4...9.12.1) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 12.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@nestjs/config" dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@nestjs/core" dependency-version: 12.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@nestjs/microservices" dependency-version: 12.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@nestjs/mongoose" dependency-version: 12.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@nestjs/passport" dependency-version: 12.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@nestjs/platform-express" dependency-version: 12.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: "@nestjs/swagger" dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: joi dependency-version: 18.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: mongoose dependency-version: 9.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 14, 2026

Navigation Menu

Repository navigation

chore(deps): bump the production group with 10 updates - #12

chore(deps): bump the production group with 10 updates#12
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/production-310cdfb3c3

dependabot Bot commented on behalf of github Nov 14, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 14, 2026

v12.4.1 (2026-11-09)

Features

Bug fixes

Enhancements

Dependencies

Committers: 8

v12.4.0 (2026-11-06)

Features

Bug fixes

Release 12.1.1

Dependencies

Release 12.1.0

Security

Behavior changes

Features

Bug fixes

Deprecations

v12.4.1 (2026-11-09)

Features

Bug fixes

Enhancements

Dependencies

Committers: 8

v12.4.0 (2026-11-06)

Features

Bug fixes

v12.4.1 (2026-11-09)

Features

Bug fixes

Enhancements

Dependencies

Committers: 8

v12.4.0 (2026-11-06)

Features

Bug fixes

Release 12.0.1

Features

Bug fixes

Release 12.0.1

Bug fixes

v12.4.1 (2026-11-09)

Features

Bug fixes

Enhancements

Dependencies

Committers: 8

v12.4.0 (2026-11-06)

Features

Bug fixes

Release 12.1.1

Bug fixes

Dependencies

9.12.1 / 2026-11-09

9.12.0 / 2026-11-04

9.12.1 / 2026-11-09

9.12.0 / 2026-11-04

9.11.5 / 2026-11-03

8.24.8 / 2026-11-02

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants