Bump the nestjs group in /server with 12 updates by dependabot[bot] · Pull Request #15 · oiibar/Wisely

dependabot · 2026-11-10T18:37:19Z

Bumps the nestjs group in /server with 12 updates:

Package	From	To
@nestjs/common	`11.2.9`	`12.4.0`
@nestjs/config	`4.0.4`	`12.1.1`
@nestjs/core	`11.2.9`	`12.4.0`
@nestjs/jwt	`11.0.2`	`12.0.4`
@nestjs/passport	`11.0.5`	`12.0.1`
@nestjs/platform-express	`11.2.9`	`12.4.0`
@nestjs/swagger	`11.4.8`	`12.1.1`
@nestjs/terminus	`11.1.1`	`12.1.0`
@nestjs/typeorm	`11.0.3`	`12.0.3`
@nestjs/cli	`11.0.24`	`12.0.12`
@nestjs/schematics	`11.1.0`	`12.0.13`
@nestjs/testing	`11.2.9`	`12.4.0`

Updates @nestjs/common from 11.2.9 to 12.4.0

Release notes

Sourced from @nestjs/common's releases.

v12.4.0 (2026-11-06)

Features

platform-node

#18396 feat(node): let the node adapter set locals for every view (@thekhegay)

Bug fixes

microservices

#18418 fix(microservices): ignore an mqtt server's own replies under wildcards (@pavstev)

#18413 fix(microservices): reach handlers whose string pattern reads as json (@pavstev)

#18392 fix(microservices): forward grpc call options on request streams (@DenisCDev)

#18393 fix(microservices): await the mqtt close and reset the client state (@hktitof)

common

#18419 fix(common): keep the fields of grouped item errors in parse array pipe (@pavstev)

#18402 fix(common): keep console logger from mutating the caller options (@pavstev)

platform-node

#18417 fix(node): omit the Content-Length of a redirect with a Transfer-Encoding (@hktitof)

#18415 fix(node): give each route that shares a path shape its own params (@pavstev)

#18372 fix(node): strip trailing slashes when resolving view names (@saiyam-jain-dev)

#18403 fix(node): omit content-length when transfer-encoding is set (@pavstev)

#18395 fix(node): render with eta, liquidjs and art-template (@thekhegay)

#18391 fix(node): add the charset to a content type the app sets (@pavstev)

platform-fastify

#18414 fix(fastify): answer 403 for a path the static plugin refuses (@pavstev)

core, testing

#18410 fix(core): apply a provider override whose value is undefined (@pavstev)

platform-express, platform-fastify, platform-node

#18400 fix(express,node,fastify): declare rxjs as a peer dependency (@ryodine)

core

#18407 fix(core): run middleware on subpaths next to an all-methods route (@beyondwin)

#18401 fix(core): cache external handler metadata per context type (@kamilmysliwiec)

Enhancements

common, core

#18427 feat(core,common): send a web response or stream a handler returns (@kamilmysliwiec)

Dependencies

platform-fastify

#18422 fix(deps): update dependency @fastify/cors to v11.4.1 (@renovate[bot])

Committers: 8

Abdellatif Anaflous (@hktitof)

Denis Scarabelli (@DenisCDev)

Kamil Mysliwiec (@kamilmysliwiec)

Roman Khegay (@thekhegay)

Ryan Johnson (@ryodine)

Saiyam Jain (@saiyam-jain-dev)

Stevan Pavlović (@pavstev)

WooSeung Kim (@beyondwin)

... (truncated)

Commits

c0e503b chore(release): publish v12.4.0 release
cef9dbb feat(core,common): send a web response or stream a handler returns (#18427)
79c05a5 chore: describe the packages on npm (#18426)
ca790a9 fix(common): keep the fields of grouped item errors in parse array pipe (#18419)
7389cde fix(common): keep console logger from mutating the caller options (#18402)
59f3379 chore(release): publish v12.3.3 release
8d9dd9d fix(deps): update dependency tslib to v2.9.1 (#18346)
8fbfa21 fix(deps): update dependency file-type to v22.3.0 (#18334)
9adef69 fix(common): strip prototype keys from values with cycles (#18340)
8609d7b fix(microservices,websockets): load with an older common (#18304)
Additional commits viewable in compare view

Updates @nestjs/config from 4.0.4 to 12.1.1

Release notes

Sourced from @nestjs/config's releases.

Release 12.1.1

Dependencies

fix(deps): update dependency es-toolkit to v1.53.1 in nestjs/config#2470

Full Changelog: nestjs/config@12.1.0...12.1.1

Release 12.1.0

Security

This release fixes several security issues in how ConfigService resolves property paths and how ConfigModule.forRoot() loads and validates environment variables. See GHSA-q989-84g5-qg72 for details. Upgrading is recommended.

Behavior changes

Some fixes change what ConfigService returns. Please review them before upgrading:

Property paths only resolve members a configuration object defines (own properties and members of your own classes). Members inherited from built-ins resolve to undefined, e.g. get('database.toString'), get('constructor.prototype') or get('cert.length') for a Buffer. set() never writes through them, and paths through __proto__, constructor or prototype are ignored.

Validated variables take precedence:

A variable that the validator maps to undefined is no longer served from process.env. get(key, defaultValue) returns the default.

A variable that a validationSchema declares and removes (e.g. Joi .strip()) is no longer merged back. Undeclared variables are still kept.

With skipProcessEnv: true and a validationSchema, undeclared variables from process.env are no longer served. Declared ones still are. A validate function's output is served as it is.

With validatePredefined: false, a predefined variable now takes precedence over a different value from the env file, and get() returns it as it is.

A second validated forRoot() no longer replaces the converted values of another one.

expandVariables:

Expanded values are assigned to process.env after validation, not before.

Several env files are expanded once, so $ and \$ in earlier files are no longer expanded again.

With override: true, a variable's reference to itself (e.g. PATH=/opt/bin:$PATH) expands to its previous value.

Env files: a value containing a NUL character now fails startup instead of being truncated in process.env. __proto__ keys returned by a custom parser are ignored.

ConfigService.set():

Dependent variables are re-expanded from the definitions loaded at startup. The env files are not read again.

Values passed to earlier set() calls and variables set in the environment are kept.

The expandVariables.processEnv target is honored.

A re-expanded value longer than 128 KiB throws.

Load order:

ConfigService from a plain imports: [ConfigModule] or ConfigModule.forFeature() is provided once forRoot() has merged its load factories.

ConfigModule.envVariablesLoaded (used by ConditionalModule.registerWhen()) waits until every forRoot() in progress has loaded its environment variables.

Validation errors no longer include the rejected value: Joi pattern() messages leave it out, and a quoted value is replaced with [redacted].

Features

validate may be an async function. A rejected promise stops startup.

ConfigService.set() re-interpolates variables that depend on the changed key, including chains of references (#2463).

Bug fixes

override: true takes precedence when expanding variables (#2465).

get('_PROCESS_ENV_VALIDATED') no longer returns the internal snapshot of validated variables.

Deprecations

... (truncated)

Commits

c264bc8 chore(): release v12.1.1
0b7e9b2 chore: describe the package on npm (#2480)
55fca64 chore(deps): update dependency vite to v8.3.6 (#2479)
6d25d91 chore(deps): update dependency joi to v18.3.2 (#2478)
23283fe chore(deps): update node.js to v26 (#2472)
54c552b chore(deps): update node.js to v26 (#2471)
3baa646 fix(deps): update dependency es-toolkit to v1.53.1 (#2470)
09986c9 chore(deps): update dependency oxlint to v1.91.0 (#2476)
8d7ff2e chore(deps): update nest monorepo to v12.3.3 (#2477)
f2b2a3a chore(deps): update node.js to v24.22.2 (#2469)
Additional commits viewable in compare view

Updates @nestjs/core from 11.2.9 to 12.4.0

Release notes

Sourced from @nestjs/core's releases.

v12.4.0 (2026-11-06)

Features

platform-node

#18396 feat(node): let the node adapter set locals for every view (@thekhegay)

Bug fixes

microservices

#18418 fix(microservices): ignore an mqtt server's own replies under wildcards (@pavstev)

#18413 fix(microservices): reach handlers whose string pattern reads as json (@pavstev)

#18392 fix(microservices): forward grpc call options on request streams (@DenisCDev)

#18393 fix(microservices): await the mqtt close and reset the client state (@hktitof)

common

#18419 fix(common): keep the fields of grouped item errors in parse array pipe (@pavstev)

#18402 fix(common): keep console logger from mutating the caller options (@pavstev)

platform-node

#18417 fix(node): omit the Content-Length of a redirect with a Transfer-Encoding (@hktitof)

#18415 fix(node): give each route that shares a path shape its own params (@pavstev)

#18372 fix(node): strip trailing slashes when resolving view names (@saiyam-jain-dev)

#18403 fix(node): omit content-length when transfer-encoding is set (@pavstev)

#18395 fix(node): render with eta, liquidjs and art-template (@thekhegay)

#18391 fix(node): add the charset to a content type the app sets (@pavstev)

platform-fastify

#18414 fix(fastify): answer 403 for a path the static plugin refuses (@pavstev)

core, testing

#18410 fix(core): apply a provider override whose value is undefined (@pavstev)

platform-express, platform-fastify, platform-node

#18400 fix(express,node,fastify): declare rxjs as a peer dependency (@ryodine)

core

#18407 fix(core): run middleware on subpaths next to an all-methods route (@beyondwin)

#18401 fix(core): cache external handler metadata per context type (@kamilmysliwiec)

Enhancements

common, core

#18427 feat(core,common): send a web response or stream a handler returns (@kamilmysliwiec)

Dependencies

platform-fastify

#18422 fix(deps): update dependency @fastify/cors to v11.4.1 (@renovate[bot])

Committers: 8

Abdellatif Anaflous (@hktitof)

Denis Scarabelli (@DenisCDev)

Kamil Mysliwiec (@kamilmysliwiec)

Roman Khegay (@thekhegay)

Ryan Johnson (@ryodine)

Saiyam Jain (@saiyam-jain-dev)

Stevan Pavlović (@pavstev)

WooSeung Kim (@beyondwin)

... (truncated)

Commits

c0e503b chore(release): publish v12.4.0 release
cef9dbb feat(core,common): send a web response or stream a handler returns (#18427)
79c05a5 chore: describe the packages on npm (#18426)
32790fb fix(core): apply a provider override whose value is undefined (#18410)
a46202f fix(core): run middleware on subpaths next to an all-methods route (#18407)
2643bf0 fix(core): cache external handler metadata per context type (#18401)
59f3379 chore(release): publish v12.3.3 release
7a3d21a fix(core): watch the response for a disconnect when the socket cannot report ...
4d892ae fix(core): share one in-flight load between concurrent lazy loads (#18371)
08bff32 fix(core): drop a middleware route an all-methods route covers (#18357)
Additional commits viewable in compare view

Updates @nestjs/jwt from 11.0.2 to 12.0.4

Release notes

Sourced from @nestjs/jwt's releases.

Release 12.0.4

Bug fixes

fix(jwt): accept KeyObject for secret and publicKey in call options by @RaphaelFakhri in nestjs/jwt#2303

Full Changelog: nestjs/jwt@12.0.3...12.0.4

Release 12.0.3

What's Changed

fix(jwt): reject async sign when the secret provider rejects by @thekhegay in nestjs/jwt#2294

fix(jwt): suppress async provider rejection on string payload error by @thekhegay in nestjs/jwt#2295

New Contributors

@thekhegay made their first contribution in nestjs/jwt#2294

Full Changelog: nestjs/jwt@12.0.2...12.0.3

Release 12.0.2

What's Changed

fix(jwt): add type overloads for decode with complete option and nullable return by @Asadshah7950 in nestjs/jwt#2269

New Contributors

@Asadshah7950 made their first contribution in nestjs/jwt#2269

Full Changelog: nestjs/jwt@12.0.1...12.0.2

Release 12.0.1

fix: jsonwebtoken esm imports (05d0075)

Release 12.0.0

What's Changed

@nestjs/jwt is now a native ES module, and the major version is aligned with the Nest 12 release line

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.
// ✅
import { JwtModule, JwtService } from '@nestjs/jwt';
// ❌ no longer resolvable
import { JwtService } from '@nestjs/jwt/dist/jwt.service';
require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support (Node 20.19+, 22.12+, and all of 24.x), a CommonJS Nest application can keep requiring the package exactly as before:

... (truncated)

Commits

d9deff3 chore(): release v12.0.4
9631171 chore: describe the package on npm (#2313)
1cf336e chore(deps): update nest monorepo to v12.3.3 (#2312)
1ba3840 chore(deps): update dependency oxlint to v1.91.0 (#2311)
7f94aee chore(deps): update dependency release-it to v21.1.2 (#2310)
1cf10d5 chore(deps): update dependency @types/node to v26.6.6 (#2309)
96a861c chore(deps): update dependency @types/node to v26 (#2307)
c8b326d chore(deps): update nest monorepo to v12.3.2 (#2306)
89487aa chore(deps): update dependency oxlint to v1.90.0 (#2305)
761ea34 chore(deps): update nest monorepo to v12.2.0 (#2302)
Additional commits viewable in compare view

Updates @nestjs/passport from 11.0.5 to 12.0.1

Release notes

Sourced from @nestjs/passport's releases.

Release 12.0.1

Bug fixes

fix(strategy): guard callback arity when validate is not on prototype by @RaphaelFakhri in nestjs/passport#2344

Full Changelog: nestjs/passport@12.0.0...12.0.1

Release 12.0.0

What's Changed

@nestjs/passport is now a native ES module, and the major version is aligned with the Nest 12 release line.

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals (e.g. @nestjs/passport/dist/auth.guard) are no longer resolvable — import from the package root:
import { AuthGuard, PassportModule, PassportStrategy } from '@nestjs/passport';
require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, a CommonJS app can keep doing:
const { AuthGuard, PassportModule } = require('@nestjs/passport');
This requires Node.js 20.19+ or 22.12+ (where require(esm) is enabled by default). On older Node versions you must either upgrade Node or move your app to ESM.

AuthGuard no longer forwards module options to passport.authenticate()

defaultStrategy and property — options that belong to PassportModule.register(), not to Passport itself — were being passed straight through to passport.authenticate(), where they could collide with strategy-level options. They are now stripped before the call, so a strategy only ever receives real AuthenticateOptions.

The signature of getAuthenticateOptions() changed accordingly:
// before
getAuthenticateOptions(
  context: ExecutionContext,
): Promise<IAuthModuleOptions> | IAuthModuleOptions | undefined;
// after
getAuthenticateOptions(
context: ExecutionContext,
):
| Promise<AuthGuardAuthenticateOptions>
| AuthGuardAuthenticateOptions
| undefined;

... (truncated)

Commits

be5fdd9 chore(): release v12.0.1
4f657b5 chore: describe the package on npm (#2353)
e714145 chore(deps): update nest monorepo to v12.3.3 (#2352)
cf6172d chore(deps): update dependency oxlint to v1.91.0 (#2351)
c4f95cf chore(deps): update dependency rimraf to v6.1.4 (#2350)
6c1faaf chore(deps): update vitest monorepo to v5.1.0 (#2349)
e2056ed chore(deps): update dependency release-it to v21.1.2 (#2348)
8c40410 chore(deps): update nest monorepo to v12.3.2 (#2338)
39cfd40 chore(deps): update dependency oxlint to v1.90.0 (#2337)
d287603 chore(deps): update dependency lint-staged to v17.6.0 (#2336)
Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.2.9 to 12.4.0

Release notes

Sourced from @nestjs/platform-express's releases.

v12.4.0 (2026-11-06)

Features

platform-node

#18396 feat(node): let the node adapter set locals for every view (@thekhegay)

Bug fixes

microservices

#18418 fix(microservices): ignore an mqtt server's own replies under wildcards (@pavstev)

#18413 fix(microservices): reach handlers whose string pattern reads as json (@pavstev)

#18392 fix(microservices): forward grpc call options on request streams (@DenisCDev)

#18393 fix(microservices): await the mqtt close and reset the client state (@hktitof)

common

#18419 fix(common): keep the fields of grouped item errors in parse array pipe (@pavstev)

#18402 fix(common): keep console logger from mutating the caller options (@pavstev)

platform-node

#18417 fix(node): omit the Content-Length of a redirect with a Transfer-Encoding (@hktitof)

#18415 fix(node): give each route that shares a path shape its own params (@pavstev)

#18372 fix(node): strip trailing slashes when resolving view names (@saiyam-jain-dev)

#18403 fix(node): omit content-length when transfer-encoding is set (@pavstev)

#18395 fix(node): render with eta, liquidjs and art-template (@thekhegay)

#18391 fix(node): add the charset to a content type the app sets (@pavstev)

platform-fastify

#18414 fix(fastify): answer 403 for a path the static plugin refuses (@pavstev)

core, testing

#18410 fix(core): apply a provider override whose value is undefined (@pavstev)

platform-express, platform-fastify, platform-node

#18400 fix(express,node,fastify): declare rxjs as a peer dependency (@ryodine)

core

#18407 fix(core): run middleware on subpaths next to an all-methods route (@beyondwin)

#18401 fix(core): cache external handler metadata per context type (@kamilmysliwiec)

Enhancements

common, core

#18427 feat(core,common): send a web response or stream a handler returns (@kamilmysliwiec)

Dependencies

platform-fastify

#18422 fix(deps): update dependency @fastify/cors to v11.4.1 (@renovate[bot])

Committers: 8

Abdellatif Anaflous (@hktitof)

Denis Scarabelli (@DenisCDev)

Kamil Mysliwiec (@kamilmysliwiec)

Roman Khegay (@thekhegay)

Ryan Johnson (@ryodine)

Saiyam Jain (@saiyam-jain-dev)

Stevan Pavlović (@pavstev)

WooSeung Kim (@beyondwin)

... (truncated)

Commits

c0e503b chore(release): publish v12.4.0 release
79c05a5 chore: describe the packages on npm (#18426)
1d22fa3 fix(express,node,fastify): declare rxjs as a peer dependency (#18400)
59f3379 chore(release): publish v12.3.3 release
8d9dd9d fix(deps): update dependency tslib to v2.9.1 (#18346)
a415cff chore(release): publish v12.3.2 release
9576609 chore(release): publish v12.3.1 release
3acb8e5 chore(release): publish v12.3.0 release
0eef541 fix(deps): update dependency multer to v2.5.0 [security] (#18268)
0c9db73 fix(express): map unsupported multipart content types to 415 (#18264)
Additional commits viewable in compare view

Updates @nestjs/swagger from 11.4.8 to 12.1.1

Release notes

Sourced from @nestjs/swagger's releases.

Release 12.1.1

Bug fixes

fix(nullable): emit numeric exclusive bounds in 3.1 documents by @kkatalz in nestjs/swagger#4254

fix(schema): preserve explicit type when schema combinator is declared by @helmipradita in nestjs/swagger#4250

fix(api-link): link to the operation id set with @ApiOperation by @RaphaelFakhri in nestjs/swagger#4252

fix(plugin): keep @example values as strings for optional string properties by @kkatalz in nestjs/swagger#4246

fix(schema): move openapi 3.1 keywords of parameters into the schema by @SiKreuz in nestjs/swagger#4243

fix(scanner): strip dynamic defaults from operation schemas by @mwawacek in nestjs/swagger#4244

fix(explorer): merge headers declared on both controller and method by @mwawacek in nestjs/swagger#4240

fix(schema): keep explicit items of array parameters by @mwawacek in nestjs/swagger#4241

fix(schema): document arrays of bigint properties as arrays by @mwawacek in nestjs/swagger#4239

fix(api-param): document array types written as a tuple by @mwawacek in nestjs/swagger#4237

fix(api-header): keep falsy example values by @mwawacek in nestjs/swagger#4236

fix(schema): move length constraints of array parameters to the items by @mwawacek in nestjs/swagger#4235

fix(document-builder): normalise global response types and descriptions by @kkatalz in nestjs/swagger#4233

Dependencies

fix(deps): update dependency es-toolkit to v1.53.1 in nestjs/swagger#4208

fix(deps): update dependency swagger-ui-dist to v5.34.1 in nestjs/swagger#4228

Full Changelog: nestjs/swagger@12.1.0...12.1.1

Release 12.1.0

Behavior changes

PartialType() / DeepPartialType(): documented properties without validators are now stripped or rejected by a whitelisting ValidationPipe.

swagger-ui-init.js ignores the url query parameter of the docs page. Use swaggerUrl or swaggerOptions.url / urls instead.

When the setup path ends in a route parameter (e.g. docs/:tenant), the /<last segment>/ aliases for the init script and static assets are no longer registered.

DocumentBuilder: addGlobalParameters() and addGlobalResponse() apply only to documents created from that builder's config, and build() returns a new copy on every call.

The demo page (index.html) and the LICENSE file of swagger-ui-dist are never served, and the static assets no longer serve directory index files.

@ApiHideProperty() hides a property inherited from a parent class, and a property decorated with both @ApiProperty() and @ApiHideProperty() is hidden.

@ApiIncludeEndpoint(false) counts as not decorated under onlyIncludeDecoratedEndpoints, and controllers without any documented endpoint no longer register their class-level models.

A default holding a model lists only the properties the model documents.

Inline OmitType() / PickType() schema names spell only documented keys, and mapped type names are resolved when they are read.

The CLI plugin metadata of a class that re-declares an inherited property takes precedence over what was inferred for the parent class. Options set with decorators still apply.

Routes sharing a path and method document the union of their security requirements.

OpenAPI < 3.1: a webhook sharing its path and method with a route is left out of the document (with a warning) instead of replacing the route.

Response links to operations that are not in the document are removed.

Fixes

fix(type-helpers): make only validated properties optional in partial types (3254eb63)

fix(swagger-module): skip asset aliases when the path ends in a param (ab1e33dc)

fix(swagger-ui): ignore the url query parameter in swagger-ui-init.js (820cb613)

fix(type-helpers): match numeric keys in OmitType and PickType (74776cc7)

fix(document-builder): scope global metadata and built configs to the builder (5245be90)

fix(schema): omit hidden model properties from property defaults (933d8e64)

fix(explorer): apply endpoint exclusion before exploring a controller (cc75875a)

... (truncated)

Commits

fbb5cbc chore(): release v12.1.1
427db4c chore: describe the package on npm (#4255)
74f4b04 chore(deps): update nest monorepo to v12.3.3 (#4248)
855e6f3 chore(deps): update dependency vite to v8.3.6 (#4253)
54b8eb7 fix(nullable): emit numeric exclusive bounds in 3.1 documents (#4254)
d50c756 fix(schema): preserve explicit type when schema combinator is declared (#4250)
c151d1c fix(api-link): link to the operation id set with @ApiOperation (#4252)
60d4676 chore(deps): update dependency @fastify/static to v10.1.10 (#4247)
1a61cc6 fix(plugin): keep @example values as strings for optional string properties (...
4506fbf chore(renovate): migrate the renovate config (#4211)
Additional commits viewable in compare view

Updates @nestjs/terminus from 11.1.1 to 12.1.0

Release notes

Sourced from @nestjs/terminus's releases.

Release 12.1.0

12.1.0 (2026-09-20)

Bug Fixes

memory leak in attempt().withTimeout() caused by AbortSignal.any() (7843ef3), closes #2767

Features

http: accept URL object in HttpHealthIndicator.pingCheck (7bc43cd), @Asadshah7950

Release 12.0.0

12.0.0 (2026-08-31)

Bug Fixes

close the microservice client when the ping fails (8826bc6)

http: create a dedicated HttpService instead of resolving from DI (163bfef), closes #2667

microservice: stop RMQ pingCheck from asserting a queue per probe (9afc532), closes #2680

mongoose: ping the database instead of checking readyState (e1c6486), closes #2661

set shutting_down before awaiting the graceful shutdown timeout (1615c29)

Features

ship the package as ESM (fae6663)

add attempt() function (ef9ab99)

add degraded status for health indicator (1cfb8af)

add responseTime to the HealthCheckResult (a0434ae)

@nestjs/terminus no longer has runtime dependencies

BREAKING CHANGES

the package is now ESM-only and requires Node ^20.19.0 || ^22.12.0 || >=24.0.0.

the deprecated HealthIndicator base class and its getStatus() have been removed. Migrate custom indicators to HealthIndicatorService: super.getStatus(key, isHealthy, data) becomes this.healthIndicatorService.check(key).up(data) / .down(data).

the deprecated error classes are no longer exported: HealthCheckError, ConnectionNotFoundError, TimeoutError, StorageExceededError, UnhealthyResponseCodeError, MongoConnectionError.

throwing inside a health indicator no longer produces a 503. In v11, a thrown HealthCheckError was unwrapped into the health check result; now any thrown error is treated as an unexpected failure (500) and only a returned down result marks the check unhealthy (503).

Release 12.0.0-next.1

12.0.0-next.1 (2026-08-31)

... (truncated)

Changelog

Sourced from @nestjs/terminus's changelog.

12.1.0 (2026-09-20)

Bug Fixes

memory leak in attempt().withTimeout() caused by AbortSignal.any() (7843ef3), closes #2767

Features

http: accept URL object in HttpHealthIndicator.pingCheck (7bc43cd)

12.0.0 (2026-08-31)

12.0.0-next.1 (2026-08-31)

Features

add .cacheFor() builder (ba59644)

add degraded status for health indicator (1cfb8af)

add responseTime to the HealthCheckResponse (a0434ae)

12.0.0-next.0 (2026-08-30)

Bug Fixes

close the microservice client when the ping fails (8826bc6)

http: create a dedicated HttpService instead of resolving from DI (163bfef), closes #2667

microservice: stop RMQ pingCheck from asserting a queue per probe (9afc532), closes #2680

mongoose: ping the database instead of checking readyState (e1c6486), closes #2661

set shutting_down before awaiting the graceful shutdown timeout (1615c29)

Features

add attempt() function (ef9ab99)

Ship the package as ESM (fae6663)

BREAKING CHANGES

the package is now ESM-only and requires Node ^20.19.0 || ^22.12.0 || >=24.0.0.

11.1.0 (2026-02-17)

Bug Fixes

... (truncated)

Commits

e2ccc71 chore(): release v12.1.0
3832b91 Merge pull request #2770 from nestjs/renovate/confluentinc-cp-zookeeper-7.x
c17b1d1 Merge pull request #2759 from nestjs/renovate/class-validator-0.x
4ae806d test: fix flaky memory test
4156082 chore(deps): update dependency class-validator to v0.15.1
d0eefa6 chore(deps): update confluentinc/cp-zookeeper docker tag to v7.9.10
c844f69 Merge pull request #2760 from nestjs/renovate/express-5.x

Bumps the nestjs group in /server with 12 updates: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.9` | `12.4.0` | | [@nestjs/config](https://github.com/nestjs/config) | `4.0.4` | `12.1.1` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.9` | `12.4.0` | | [@nestjs/jwt](https://github.com/nestjs/jwt) | `11.0.2` | `12.0.4` | | [@nestjs/passport](https://github.com/nestjs/passport) | `11.0.5` | `12.0.1` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.9` | `12.4.0` | | [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.4.8` | `12.1.1` | | [@nestjs/terminus](https://github.com/nestjs/terminus) | `11.1.1` | `12.1.0` | | [@nestjs/typeorm](https://github.com/nestjs/typeorm) | `11.0.3` | `12.0.3` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `11.0.24` | `12.0.12` | | [@nestjs/schematics](https://github.com/nestjs/schematics) | `11.1.0` | `12.0.13` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.2.9` | `12.4.0` | Updates `@nestjs/common` from 11.2.9 to 12.4.0 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.0/packages/common) Updates `@nestjs/config` from 4.0.4 to 12.1.1 - [Release notes](https://github.com/nestjs/config/releases) - [Commits](nestjs/config@4.0.4...12.1.1) Updates `@nestjs/core` from 11.2.9 to 12.4.0 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.0/packages/core) Updates `@nestjs/jwt` from 11.0.2 to 12.0.4 - [Release notes](https://github.com/nestjs/jwt/releases) - [Commits](nestjs/jwt@11.0.2...12.0.4) Updates `@nestjs/passport` from 11.0.5 to 12.0.1 - [Release notes](https://github.com/nestjs/passport/releases) - [Commits](nestjs/passport@11.0.5...12.0.1) Updates `@nestjs/platform-express` from 11.2.9 to 12.4.0 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.0/packages/platform-express) Updates `@nestjs/swagger` from 11.4.8 to 12.1.1 - [Release notes](https://github.com/nestjs/swagger/releases) - [Commits](nestjs/swagger@11.4.8...12.1.1) Updates `@nestjs/terminus` from 11.1.1 to 12.1.0 - [Release notes](https://github.com/nestjs/terminus/releases) - [Changelog](https://github.com/nestjs/terminus/blob/master/CHANGELOG.md) - [Commits](nestjs/terminus@11.1.1...12.1.0) Updates `@nestjs/typeorm` from 11.0.3 to 12.0.3 - [Release notes](https://github.com/nestjs/typeorm/releases) - [Commits](nestjs/typeorm@11.0.3...12.0.3) Updates `@nestjs/cli` from 11.0.24 to 12.0.12 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Commits](nestjs/nest-cli@11.0.24...12.0.12) Updates `@nestjs/schematics` from 11.1.0 to 12.0.13 - [Release notes](https://github.com/nestjs/schematics/releases) - [Commits](nestjs/schematics@11.1.0...12.0.13) Updates `@nestjs/testing` from 11.2.9 to 12.4.0 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.4.0/packages/testing) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 12.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/config" dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/core" dependency-version: 12.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/jwt" dependency-version: 12.0.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/passport" dependency-version: 12.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/platform-express" dependency-version: 12.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/swagger" dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/terminus" dependency-version: 12.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/typeorm" dependency-version: 12.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/cli" dependency-version: 12.0.12 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/schematics" dependency-version: 12.0.13 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nestjs - dependency-name: "@nestjs/testing" dependency-version: 12.4.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nestjs ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-11-10T18:37:21Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
wisely	Building	Preview	Nov 11, 2026 8:43am UTC

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 10, 2026

oiibar force-pushed the dependabot/npm_and_yarn/server/nestjs-cf5a787fcc branch from 8ba9aae to 177ffa5 Compare November 11, 2026 08:34

oiibar force-pushed the master branch from 9061391 to 16387e5 Compare November 11, 2026 08:34

oiibar force-pushed the dependabot/npm_and_yarn/server/nestjs-cf5a787fcc branch from 177ffa5 to bd152ef Compare November 11, 2026 08:43

oiibar force-pushed the master branch from 16387e5 to d11b4da Compare November 11, 2026 08:43

Navigation Menu

Repository navigation

Bump the nestjs group in /server with 12 updates - #15

Bump the nestjs group in /server with 12 updates#15
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/server/nestjs-cf5a787fcc

dependabot Bot commented on behalf of github Nov 10, 2026

Uh oh!

vercel Bot commented Nov 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 10, 2026

v12.4.0 (2026-11-06)

Features

Bug fixes

Enhancements

Dependencies

Committers: 8

Release 12.1.1

Dependencies

Release 12.1.0

Security

Behavior changes

Features

Bug fixes

Deprecations

v12.4.0 (2026-11-06)

Features

Bug fixes

Enhancements

Dependencies

Committers: 8

Release 12.0.4

Bug fixes

Release 12.0.3

What's Changed

New Contributors

Release 12.0.2

What's Changed

New Contributors

Release 12.0.1

Release 12.0.0

What's Changed

ESM migration

require(esm) — CommonJS still works

Release 12.0.1

Bug fixes

Release 12.0.0

What's Changed

ESM migration

require(esm) — CommonJS still works

AuthGuard no longer forwards module options to passport.authenticate()

v12.4.0 (2026-11-06)

Features

Bug fixes

Enhancements

Dependencies

Committers: 8

Release 12.1.1

Bug fixes

Dependencies

Release 12.1.0

Behavior changes

Fixes

Release 12.1.0

12.1.0 (2026-09-20)

Bug Fixes

Features

Release 12.0.0

12.0.0 (2026-08-31)

Bug Fixes

Features

BREAKING CHANGES

Release 12.0.0-next.1

12.0.0-next.1 (2026-08-31)

12.1.0 (2026-09-20)

Bug Fixes

Features

12.0.0 (2026-08-31)

12.0.0-next.1 (2026-08-31)

Features

12.0.0-next.0 (2026-08-30)

Bug Fixes

Features

BREAKING CHANGES

11.1.0 (2026-02-17)

Bug Fixes

Uh oh!

vercel Bot commented Nov 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

`require(esm)` — CommonJS still works

`AuthGuard` no longer forwards module options to `passport.authenticate()`

vercel Bot commented Nov 10, 2026 •

edited

Loading