chore(deps): bump the npm-dependencies group across 1 directory with 24 updates

[dependabot]

Bumps the npm-dependencies group with 24 updates in the /apps/backend directory:

Package	From	To
@clickhouse/client	1.18.2	1.19.0
@ipld/car	5.4.2	5.4.6
@ipld/dag-pb	4.1.5	4.1.7
@nestjs/common	11.1.13	11.1.24
@nestjs/config	4.0.3	4.0.4
@nestjs/core	11.1.13	11.1.24
@nestjs/platform-express	11.1.13	11.1.24
@nestjs/schedule	6.1.1	6.1.3
@nestjs/swagger	11.2.6	11.4.4
@nestjs/typeorm	11.0.0	11.0.1
@willsoto/nestjs-prometheus	6.0.2	6.1.0
axios	1.13.5	1.16.1
class-validator	0.14.3	0.15.1
filecoin-pin	0.21.0	0.22.3
helmet	8.1.0	8.2.0
joi	18.0.2	18.2.1
pg	8.18.0	8.21.0
pg-boss	12.11.1	12.18.2
viem	2.48.11	2.52.0
@nestjs/cli	11.0.16	11.0.21
@nestjs/schematics	11.0.9	11.1.0
@nestjs/testing	11.1.13	11.1.24
@types/node	25.2.3	25.9.1
ts-loader	9.5.4	9.6.0

Updates @clickhouse/client from 1.18.2 to 1.19.0

Release notes

Sourced from @​clickhouse/client's releases.

1.19.0

Improvements

• Re-exported the ResponseHeaders type from @clickhouse/client and @clickhouse/client-web. Previously this type was only available from @clickhouse/client-common; it is now part of the public re-export surface of both flavored packages, alongside the other commonly used types. This is part of an ongoing effort to make @clickhouse/client-common an internal-only package so downstream consumers can depend solely on @clickhouse/client or @clickhouse/client-web. (#758)

#758: ClickHouse/clickhouse-js#758

Bug Fixes

• Enum type parsing now correctly unescapes backslash escape sequences in enum names. Previously, parseEnumType returned enum names with raw escape sequences (e.g., f\' instead of f'). Now it properly decodes escape sequences including \' (single quote), \\ (backslash), \n (newline), \t (tab), and \r (carriage return). This matches the behavior of ClickHouse string literals and ensures consistency with how the client encodes strings when sending data to the server. If you were relying on the previous incorrect behavior where backslash escape sequences were preserved in enum names, you will need to update your code to handle properly unescaped values.

Example:

// Before (incorrect):
parseEnumType({
  columnType: "Enum8('f\\'' = 1)",
  sourceType: "Enum8('f\\'' = 1)",
})
// returned: { values: { 1: "f\\'" } }  // with backslash
// After (correct):
parseEnumType({
columnType: "Enum8('f\'' = 1)",
sourceType: "Enum8('f\'' = 1)",
})
// returns: { values: { 1: "f'" } }     // unescaped

1.18.5

Improvements

• (Node.js only) Added max_response_headers_size client option that forwards the maxHeaderSize option to the underlying http(s).request call. This raises the per-request limit on the total size of HTTP response headers received from the server (Node.js default is ~16 KB). It is most useful when running long-running queries with send_progress_in_http_headers enabled — the X-ClickHouse-Progress headers accumulate over the lifetime of the request and can exceed the default limit, causing the request to fail with HPE_HEADER_OVERFLOW. Setting this option avoids the need to use the global --max-http-header-size Node.js CLI flag or the NODE_OPTIONS environment variable. Has no effect for the Web client (which uses fetch) and no effect when a custom http_agent is configured with a request implementation that does not honor the option.

const client = createClient({
  request_timeout: 400_000,
  max_response_headers_size: 1024 * 1024, // accept up to 1 MiB of response headers
  clickhouse_settings: {
    send_progress_in_http_headers: 1,
    http_headers_progress_interval_ms: '110000',
  },
})

• The @clickhouse/client npm package now ships embedded AI-agent skills, clickhouse-js-node-coding and clickhouse-js-node-troubleshooting, under node_modules/@clickhouse/client/skills/. These skills are also declared in the agents.skills field of the package manifest for discovery tools that scan node_modules. This allows agentic coding tools to load focused, Node-client-specific coding and troubleshooting guidance without any additional setup. (#682)

#682: ClickHouse/clickhouse-js#682

1.18.4

... (truncated)

Changelog

Sourced from @​clickhouse/client's changelog.

1.19.0

Improvements

• Re-exported the ResponseHeaders type from @clickhouse/client and @clickhouse/client-web. Previously this type was only available from @clickhouse/client-common; it is now part of the public re-export surface of both flavored packages, alongside the other commonly used types. This is part of an ongoing effort to make @clickhouse/client-common an internal-only package so downstream consumers can depend solely on @clickhouse/client or @clickhouse/client-web. (#758)

#758: ClickHouse/clickhouse-js#758

Bug Fixes

• Enum type parsing now correctly unescapes backslash escape sequences in enum names. Previously, parseEnumType returned enum names with raw escape sequences (e.g., f\' instead of f'). Now it properly decodes escape sequences including \' (single quote), \\ (backslash), \n (newline), \t (tab), and \r (carriage return). This matches the behavior of ClickHouse string literals and ensures consistency with how the client encodes strings when sending data to the server. If you were relying on the previous incorrect behavior where backslash escape sequences were preserved in enum names, you will need to update your code to handle properly unescaped values.

Example:

// Before (incorrect):
parseEnumType({
  columnType: "Enum8('f\\'' = 1)",
  sourceType: "Enum8('f\\'' = 1)",
})
// returned: { values: { 1: "f\\'" } }  // with backslash
// After (correct):
parseEnumType({
columnType: "Enum8('f\'' = 1)",
sourceType: "Enum8('f\'' = 1)",
})
// returns: { values: { 1: "f'" } }     // unescaped

1.18.5

Improvements

• (Node.js only) Added max_response_headers_size client option that forwards the maxHeaderSize option to the underlying http(s).request call. This raises the per-request limit on the total size of HTTP response headers received from the server (Node.js default is ~16 KB). It is most useful when running long-running queries with send_progress_in_http_headers enabled — the X-ClickHouse-Progress headers accumulate over the lifetime of the request and can exceed the default limit, causing the request to fail with HPE_HEADER_OVERFLOW. Setting this option avoids the need to use the global --max-http-header-size Node.js CLI flag or the NODE_OPTIONS environment variable. Has no effect for the Web client (which uses fetch) and no effect when a custom http_agent is configured with a request implementation that does not honor the option.

const client = createClient({
  request_timeout: 400_000,
  max_response_headers_size: 1024 * 1024, // accept up to 1 MiB of response headers
  clickhouse_settings: {
    send_progress_in_http_headers: 1,
    http_headers_progress_interval_ms: '110000',
  },
})

• The @clickhouse/client npm package now ships embedded AI-agent skills, clickhouse-js-node-coding and clickhouse-js-node-troubleshooting, under node_modules/@clickhouse/client/skills/. These skills are also declared in the agents.skills field of the package manifest for discovery tools that scan node_modules. This allows agentic coding tools to load focused, Node-client-specific coding and troubleshooting guidance without any additional setup. (#682)

#682: ClickHouse/clickhouse-js#682

... (truncated)

Commits

• ee91a12 Merge pull request #760 from ClickHouse/main
• 0b10dc9 Update tests/clickhouse-test-runner/package.json
• 5c136e9 chore: fix typo "butes" -> "bytes" in getAsText test comments (#747)
• d595462 Re-export ResponseHeaders from client-node and client-web (#758)
• 7b9a3d9 Polish the coding skill (#755)
• ec817cf [WIP] Fix parseEnumType to unescape enum names (#664)
• 49fa987 Merge E2E Tests workflow into publish workflow (#752)
• ca43c79 Merge pull request #745 from ClickHouse/release-1.19.0
• 2689441 Merge branch 'main' into release-1.19.0
• 8413532 Merge pull request #746 from ClickHouse/copilot/define-clickhouse-js-test-run...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​clickhouse/client since your current version.

Updates @ipld/car from 5.4.2 to 5.4.6

Release notes

Sourced from @​ipld/car's releases.

v5.4.6

5.4.6 (2026-05-12)

Trivial Changes

• deps: bump @​ipld/dag-json from 10.2.9 to 11.0.0 in /examples (#184) (eefd849)

Dependencies

• bump @​ipld/dag-cbor from 9.2.7 to 10.0.1 (#182) (a2ab328)

v5.4.5

5.4.5 (2026-05-11)

Trivial Changes

• deps: bump multiformats from 13.4.2 to 14.0.0 in /examples (#181) (d3255f1)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#180) (e1d683e)

v5.4.4

5.4.4 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#179) (a3dca47)

v5.4.3

5.4.3 (2026-04-02)

Trivial Changes

• deps: bump multiformats from 12.1.3 to 13.4.2 in /examples (#176) (2c87540)

Dependencies

• bump cborg from 4.5.8 to 5.0.0 (#178) (40ddb9c)

Changelog

Sourced from @​ipld/car's changelog.

5.4.6 (2026-05-12)

Trivial Changes

• deps: bump @​ipld/dag-json from 10.2.9 to 11.0.0 in /examples (#184) (eefd849)

Dependencies

• bump @​ipld/dag-cbor from 9.2.7 to 10.0.1 (#182) (a2ab328)

5.4.5 (2026-05-11)

Trivial Changes

• deps: bump multiformats from 13.4.2 to 14.0.0 in /examples (#181) (d3255f1)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#180) (e1d683e)

5.4.4 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#179) (a3dca47)

5.4.3 (2026-04-02)

Trivial Changes

• deps: bump multiformats from 12.1.3 to 13.4.2 in /examples (#176) (2c87540)

Dependencies

• bump cborg from 4.5.8 to 5.0.0 (#178) (40ddb9c)

Commits

• 547e433 chore(release): 5.4.6 [skip ci]
• a2ab328 deps: bump @​ipld/dag-cbor from 9.2.7 to 10.0.1 (#182)
• eefd849 chore(deps): bump @​ipld/dag-json from 10.2.9 to 11.0.0 in /examples (#184)
• 55f9112 chore(release): 5.4.5 [skip ci]
• e1d683e deps: bump multiformats from 13.4.2 to 14.0.0 (#180)
• d3255f1 chore(deps): bump multiformats from 13.4.2 to 14.0.0 in /examples (#181)
• ed69005 chore(release): 5.4.4 [skip ci]
• a3dca47 deps(dev): bump aegir from 47.2.0 to 48.0.1 (#179)
• 13d6e56 chore(release): 5.4.3 [skip ci]
• 40ddb9c deps: bump cborg from 4.5.8 to 5.0.0 (#178)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ipld/car since your current version.

Updates @ipld/dag-pb from 4.1.5 to 4.1.7

Release notes

Sourced from @​ipld/dag-pb's releases.

v4.1.7

4.1.7 (2026-05-11)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#109) (81887a9)

v4.1.6

4.1.6 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#108) (d573d19)

Changelog

Sourced from @​ipld/dag-pb's changelog.

4.1.7 (2026-05-11)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#109) (81887a9)

4.1.6 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#108) (d573d19)

Commits

• 3b870f6 chore(release): 4.1.7 [skip ci]
• 81887a9 deps: bump multiformats from 13.4.2 to 14.0.0 (#109)
• a13ed0c chore(release): 4.1.6 [skip ci]
• d573d19 deps(dev): bump aegir from 47.2.0 to 48.0.1 (#108)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ipld/dag-pb since your current version.

Updates @nestjs/common from 11.1.13 to 11.1.24

Release notes

Sourced from @​nestjs/common's releases.

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core
  • nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #16993 fix(core): inflight request injection bug #16989 (@​kamilmysliwiec)

Enhancements

• core
  • #16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

... (truncated)

Commits

• d8a0ab8 chore(release): publish v11.1.24 release
• 2dccece chore: update readmes
• b8be8c1 chore(release): publish v11.1.23 release
• 801c46f chore(release): publish v11.1.22 release
• 983dd52 chore(release): publish v11.1.21 release
• a0b0139 chore: update readme
• 7caeb3f chore(release): publish v11.1.20 release
• f6a3c2f fix(docs): update some old links in docs
• 4b6420b Merge pull request #16902 from QusaiAlbonni/fix/filetype-validator-buffer-mes...
• 33515ed fix(common): improve missing buffer error message in file type validator
• Additional commits viewable in compare view

Updates @nestjs/config from 4.0.3 to 4.0.4

Release notes

Sourced from @​nestjs/config's releases.

Release 4.0.4

• fix(deps): update dependency dotenv to v17.4.1 (6bc5737)
• fix(deps): update dependency lodash to v4.18.1 [security] (f31ee98)

Commits

• 3b5d592 chore(): release v4.0.4
• 4fbcb03 Merge pull request #2263 from nestjs/renovate/dotenv-17.x
• 33dae89 Merge pull request #2269 from nestjs/renovate/cimg-node-24.x
• 0a727c3 Merge pull request #2313 from nestjs/renovate/npm-lodash-vulnerability
• 6bc5737 fix(deps): update dependency dotenv to v17.4.1
• f31ee98 fix(deps): update dependency lodash to v4.18.1 [security]
• 059314c chore(deps): update dependency typescript-eslint to v8.58.1 (#2315)
• 0f81e2d chore(deps): update dependency eslint to v10.2.0 (#2314)
• e673ab2 chore(deps): update dependency @​types/node to v24.12.2 (#2311)
• b1ede30 chore(deps): update nest monorepo to v11.1.18 (#2312)
• Additional commits viewable in compare view

Updates @nestjs/core from 11.1.13 to 11.1.24

Release notes

Sourced from @​nestjs/core's releases.

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core
  • nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #16993 fix(core): inflight request injection bug #16989 (@​kamilmysliwiec)

Enhancements

• core
  • #16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

... (truncated)

Commits

• d8a0ab8 chore(release): publish v11.1.24 release
• 3ed595e fix(core): keep dependency parent registry internal
• 1b8c8b0 fix(core): propagate dependency tree cache resets
• 4c07009 fix(core): reset dependency tree cache on metadata changes
• ff95b3f Merge pull request #16997 from hbinhng/feat/warn-late-use-websocket-adapter
• 2dccece chore: update readmes
• b8be8c1 chore(release): publish v11.1.23 release
• 5de10df fix: should skip transient providers for snapshots
• d956db4 feat(core): warn on late websocket adapter registration
• 801c46f chore(release): publish v11.1.22 release
• Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.13 to 11.1.24

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core
  • nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #16993 fix(core): inflight request injection bug #16989 (@​kamilmysliwiec)

Enhancements

• core
  • #16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

... (truncated)

Commits

• d8a0ab8 chore(release): publish v11.1.24 release
• 2dccece chore: update readmes
• b8be8c1 chore(release): publish v11.1.23 release
• 801c46f chore(release): publish v11.1.22 release
• 983dd52 chore(release): publish v11.1.21 release
• a0b0139 chore: update readme
• 7caeb3f chore(release): publish v11.1.20 release
• f6a3c2f fix(docs): update some old links in docs
• 5e33ecf feat: add MulterOptions and MulterField interfaces for express platform confi...
• 6730995 chore(release): publish v11.1.19 release
• Additional commits viewable in compare view

Updates @nestjs/schedule from 6.1.1 to 6.1.3

Release notes

Sourced from @​nestjs/schedule's releases.

6.1.3

What's Changed

• feat(cron): add initialDelay option to defer first job execution by @​kyungseopk1m in nestjs/schedule#2251

Full Changelog: nestjs/schedule@6.1.2...6.1.3

Release 6.1.2

• Merge pull request #2247 from kyungseopk1m/feat/cron-initial-delay (a57ce2c)
• chore(deps): update dependency prettier to v3.8.3 (#2248) (bb3490d)
• feat(cron): add initialDelay option to defer first job execution (1c5677f)
• Merge pull request #2245 from nestjs/renovate/nest-monorepo (59046bd)
• Merge pull request #2246 from nestjs/renovate/oxlint-monorepo (be4eee3)
• chore(deps): update dependency oxlint to v1.60.0 (32a9ce2)
• chore(deps): update nest monorepo to v11.1.19 (7d3844f)
• chore: migrate to oxlint, vitest, ts6 (29de71b)
• chore(deps): update dependency globals to v17.5.0 (#2244) (6c62cca)
• chore(deps): update dependency sinon to v21.1.2 (#2243) (ee3b31a)
• chore(deps): update dependency sinon to v21.1.1 (#2241) (eba9799)
• Merge pull request #2242 from nestjs/renovate/prettier-3.x (c3ad0f7)
• chore(deps): update dependency prettier to v3.8.2 (798e2a9)
• Merge pull request #2199 from nestjs/renovate/cimg-node-24.x (a05354a)
• chore(deps): update dependency typescript-eslint to v8.58.1 (#2240) (0367ac1)
• chore(deps): update dependency eslint to v10.2.0 (#2239) (fa93e06)
• chore(deps): update nest monorepo to v11.1.18 (#2238) (8cd4c02)
• chore(deps): update dependency @​types/node to v24.12.2 (#2237) (01482df)
• chore(deps): update dependency @​types/sinon to v21.0.1 (#2236) (f05b5bd)
• chore(deps): update dependency ts-jest to v29.4.9 (#2235) (af545e6)
• chore(deps): update dependency typescript-eslint to v8.58.0 (#2233) (4dad22a)
• chore(deps): update node.js to v24.14.1 (28db9bc)
• chore(deps): update dependency eslint to v10.1.0 (#2232) (413f390)
• chore(deps): update nest monorepo to v11.1.17 (#2230) (46c2bc5)
• chore(deps): update dependency typescript-eslint to v8.57.1 (#2231) (8fd063b)
• chore(deps): update dependency sinon to v21.0.3 (#2229) (1671ad9)
• chore(deps): update commitlint monorepo to v20.5.0 (#2228) (2ecd2f1)
• chore(deps): update dependency lint-staged to v16.4.0 (#2227) (aa0de01)
• chore(deps): update commitlint monorepo to v20.4.4 (#2226) (75034fe)
• chore(deps): update dependency lint-staged to v16.3.3 (#2225) (f1c7d31)
• chore(deps): update dependency jest to v30.3.0 (#2224) (1a208d4)
• chore(deps): update dependency typescript-eslint to v8.57.0 (#2223) (60dd2c9)
• chore(deps): update dependency eslint to v10.0.3 (#2221) (791b6ba)
• chore(deps): update dependency @​eslint/eslintrc to v3.3.5 (#2220) (0da1ca7)
• chore(deps): update dependency @​types/node to v24.12.0 (#2219) (934a93e)
• chore(deps): update nest monorepo to v11.1.16 (#2218) (5f44e9b)
• chore(deps): update dependency sinon to v21.0.2 (#2217) (b807746)
• chore(deps): update dependency lint-staged to v16.3.2 (#2216) (4ca32bd)
• chore(deps): update commitlint monorepo to v20.4.3 (#2215) (d3ceb76)
• chore(deps): update nest monorepo to v11.1.15 (#2214) (b084ffc)
• chore(deps): update dependency lint-staged to v16.3.1 (#2213) (8a201b2)
• chore(deps): update dependency globals to v17.4.0 (#2212) (6f61793)
• chore(deps): update dependency lint-staged to v16.3.0 (#2211) (aa9213a)

... (truncated)

Commits

• 059f196 Merge pull request #2249 from nestjs/renovate/release-it-20.x
• 557730e Merge pull request #2251 from kyungseopk1m/feat/cron-initial-delay-v2
• 14f5b80 feat(cron): add initialDelay option to defer first job execution
• 536367d chore(deps): update dependency release-it to v20
• 57e2861 Merge pull request #2250 from nestjs/revert-2247-feat/cron-initial-delay
• e08f457 Revert "feat(cron): add initialDelay option to defer first job execution"
• 3198abe chore(): release v6.1.2
• a57ce2c Merge pull request #2247 from kyungseopk1m/feat/cron-initial-delay
• bb3490d chore(deps): update dependency prettier to v3.8.3 (#2248)
• 1c5677f feat(cron): add initialDelay option to defer first job execution
• Additional commits viewable in compare view

Updates @nestjs/swagger from 11.2.6 to 11.4.4

Release notes

Sourced from @​nestjs/swagger's releases.

Release 11.4.4

11.4.4 (2026-05-21)

Bug fixes

• #3930 fix: top-level nullable with discriminator issue (@​kamilmysliwiec)

Enhancements

• #3921 feat(swagger): add summary field to Tag Object (OpenAPI 3.2) (@​frbuceta)
• #3924 feat(swagger): warn when @​ApiTags receives hierarchy fields (@​frbuceta)
• #3925 fix(swagger): type Tag Object kind as a free-form string (@​frbuceta)

Committers: 4

• Alexander Scholz (@​LucidityDesign)
• Francisco Buceta (@​frbuceta)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Natanael dos Santos Feitosa (@​natanfeitosa)

Release 11.4.3

11.4.3 (2026-05-14)

Bug fixes

• #3910 fix(swagger): support const enum query params (@​yudin-s)
• #3911 fix(swagger-module): return reply from async route handlers (@​tibohaffner)
• #3883 fix(response-object-factory): preserve example/examples for built-in scalar response types (@​yogeshwaran-c)
• #3882 fix(swagger-types-mapper): place multipleOf inside parameter schema (@​yogeshwaran-c)

Enhancements

• #3885 feat(plugin): auto-generate enum metadata for string and number literal union types (@​y-hsgw)
• #3604 feat: added api-include-endpoint (@​TomSpott)

Dependencies

• #3906 fix(deps): update dependency swagger-ui-dist to v5.32.6 (@​renovate[bot])

Committers: 6

• Serge Yudin (@​yudin-s)
• Thibault Haffner (@​tibohaffner)
• Yogeshwaran C (@​yogeshwaran-c)
• Yukihiro Hasegawa (@​y-hsgw)
• @​TomSpott
• @​kyungseopk1m

Release 11.4.2

11.4.2 (2026-04-27)

Bug fixes

• #3867 fix(plugin): keep auto-inferred default response when only error Api*Response decorators are present (@​PeterTheOne)
• #3876 fix(plugin): handle IsIn enum inference when type falls back to Object (@​y-hsgw)

Committers: 2

• Peter Grassberger (@​PeterTheOne)

... (truncated)

Commits

• 57d8c19 chore(): release v11.4.4
• 794e895 Merge pull request #3930 from nestjs/fix/nullable-with-discriminator-3928
• d91fbe0 fix: top-level nullable with discriminator issue #3928
• 8121be3 Merge pull request #3921 from frbuceta/feat/openapi-32-tag-summary
• 5dd7ce3 feat(swagger): add summary field to OpenAPI 3.2 Tag Object
• 0d1907f Merge pull request #3927 from nestjs/renovate/vitest-monorepo
• 6edbd07 chore(deps): update dependency vitest to v4.1.7
• f797f85 Merge pull request #3924 from frbuceta/feat/api-tags-warn-hierarchy-fields
• 0a1d9c1 Merge pull request #3925 from frbuceta/fix/tag-kind-free-form-string
• 6da2e23 Apply suggestion from @​kamilmysliwiec
• Additional commits viewable in compare view

Updates @nestjs/typeorm from 11.0.0 to 11.0.1

Release notes

Sourced from @​nestjs/typeorm's releases.

Release 11.0.1

What's Changed

• feat: support v1 of TypeORM by @​naorpeled in nestjs/typeorm#2562

New Contributors

• @​naorpeled made their first contribution in nestjs/typeorm#2562

Full Changelog: nestjs/typeorm@11.0.0...11.0.1

Commits

• 57bcd24 chore(): release v11.0.1
• d08fc02 Merge pull request #2528 from nestjs/renovate/postgres-18.x
• 3d42a8e Merge pull request #2566 from nestjs/renovate/cimg-node-24.x
• 180b9c9 Merge pull request #2562 from naorpeled/feat/support-v1-of-typeorm
• 429caa3 chore(deps): update dependency ts-jest to v29.4.9 (#2569)
• 4473f7b chore(deps): update dependency typescript-eslint to v8.58.0 (#2568)
• ed9f679 fix: resolve lock sync issues
• 574b654 fix: Use ^1.0.0-dev for typeorm peer dependency range
• f8a656a chore(deps): update node.js to v24.14.1
• 70e63ed chore: Remove unnecessary unit tests
• Additional commits viewable in compare view

Updates @willsoto/nestjs-prometheus from 6.0.2 to 6.1.0

Release notes

Sourced from @​willsoto/nestjs-prometheus's releases.

v6.1.0

6.1.0 (2026-03-28)

Features

• support dependency injection in metric collect functions (7d49e53), closes #1837

Changelog

Sourced from @​willsoto/nestjs-prometheus's changelog.

6.1.0 (2026-03-28)

Features

• support dependency injection in metric collect functions (7d49e53), closes #1837

Commits

• 72c19a2 chore(release): 6.1.0 [skip ci]
• 7d49e53 feat: support dependency injection in metric collect functions
• 461651c refactor: convert to lefthook
• 60b96b6 chore(deps): update all non-major dependencies (#2462)
• Description has been truncated

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	reflect-metadata@​0.2.2
	source-map-support@​0.5.21
	rxjs@​7.8.2
	tsconfig-paths@​4.2.0
	typescript@​5.9.3

View full report