chore(deps): bump the npm-dependencies group across 1 directory with 40 updates

[dependabot]

Bumps the npm-dependencies group with 40 updates in the / directory:

Package	From	To
@clickhouse/client	1.18.2	1.19.0
@filoz/synapse-core	0.3.3	0.5.2
@ipld/car	5.4.2	5.4.6
@ipld/dag-pb	4.1.5	4.1.7
@nestjs/common	11.1.13	11.1.24
@nestjs/config	4.0.3	4.0.4
@nestjs/core	11.1.13	11.1.24
@nestjs/platform-express	11.1.13	11.1.24
@nestjs/schedule	6.1.1	6.1.3
@nestjs/swagger	11.2.6	11.4.4
@nestjs/typeorm	11.0.0	11.0.1
@willsoto/nestjs-prometheus	6.0.2	6.1.0
axios	1.13.5	1.16.1
class-validator	0.14.3	0.15.1
filecoin-pin	0.21.0	0.22.3
helmet	8.1.0	8.2.0
joi	18.0.2	18.2.1
pg	8.18.0	8.21.0
pg-boss	12.11.1	12.18.2
viem	2.48.11	2.52.0
@nestjs/cli	11.0.16	11.0.21
@nestjs/schematics	11.0.9	11.1.0
@nestjs/testing	11.1.13	11.1.24
@types/node	25.2.3	25.9.1
ts-loader	9.5.4	9.6.0
assemblyscript	0.19.23	0.28.17
@tailwindcss/vite	4.2.4	4.3.0
date-fns	4.1.0	4.4.0
react	19.2.5	19.2.7
@types/react	19.2.14	19.2.16
react-dom	19.2.5	19.2.7
react-router-dom	7.13.0	7.16.0
recharts	3.7.0	3.8.1
tailwind-merge	3.5.0	3.6.0
tailwindcss	4.2.4	4.3.0
msw	2.12.10	2.14.6
@biomejs/biome	2.3.14	2.4.16
@swc/core	1.15.11	1.15.40
@vitest/coverage-v8	4.0.18	4.1.8
vitest	4.0.18	4.1.8

Updates @clickhouse/client from 1.18.2 to 1.19.0

Release notes

Sourced from @​clickhouse/client's releases.

1.19.0

Improvements

• Re-exported the ResponseHeaders type from @clickhouse/client and @clickhouse/client-web. Previously this type was only available from @clickhouse/client-common; it is now part of the public re-export surface of both flavored packages, alongside the other commonly used types. This is part of an ongoing effort to make @clickhouse/client-common an internal-only package so downstream consumers can depend solely on @clickhouse/client or @clickhouse/client-web. (#758)

#758: ClickHouse/clickhouse-js#758

Bug Fixes

• Enum type parsing now correctly unescapes backslash escape sequences in enum names. Previously, parseEnumType returned enum names with raw escape sequences (e.g., f\' instead of f'). Now it properly decodes escape sequences including \' (single quote), \\ (backslash), \n (newline), \t (tab), and \r (carriage return). This matches the behavior of ClickHouse string literals and ensures consistency with how the client encodes strings when sending data to the server. If you were relying on the previous incorrect behavior where backslash escape sequences were preserved in enum names, you will need to update your code to handle properly unescaped values.

Example:

// Before (incorrect):
parseEnumType({
  columnType: "Enum8('f\\'' = 1)",
  sourceType: "Enum8('f\\'' = 1)",
})
// returned: { values: { 1: "f\\'" } }  // with backslash
// After (correct):
parseEnumType({
columnType: "Enum8('f\'' = 1)",
sourceType: "Enum8('f\'' = 1)",
})
// returns: { values: { 1: "f'" } }     // unescaped

1.18.5

Improvements

• (Node.js only) Added max_response_headers_size client option that forwards the maxHeaderSize option to the underlying http(s).request call. This raises the per-request limit on the total size of HTTP response headers received from the server (Node.js default is ~16 KB). It is most useful when running long-running queries with send_progress_in_http_headers enabled — the X-ClickHouse-Progress headers accumulate over the lifetime of the request and can exceed the default limit, causing the request to fail with HPE_HEADER_OVERFLOW. Setting this option avoids the need to use the global --max-http-header-size Node.js CLI flag or the NODE_OPTIONS environment variable. Has no effect for the Web client (which uses fetch) and no effect when a custom http_agent is configured with a request implementation that does not honor the option.

const client = createClient({
  request_timeout: 400_000,
  max_response_headers_size: 1024 * 1024, // accept up to 1 MiB of response headers
  clickhouse_settings: {
    send_progress_in_http_headers: 1,
    http_headers_progress_interval_ms: '110000',
  },
})

• The @clickhouse/client npm package now ships embedded AI-agent skills, clickhouse-js-node-coding and clickhouse-js-node-troubleshooting, under node_modules/@clickhouse/client/skills/. These skills are also declared in the agents.skills field of the package manifest for discovery tools that scan node_modules. This allows agentic coding tools to load focused, Node-client-specific coding and troubleshooting guidance without any additional setup. (#682)

#682: ClickHouse/clickhouse-js#682

1.18.4

... (truncated)

Changelog

Sourced from @​clickhouse/client's changelog.

1.19.0

Improvements

• Re-exported the ResponseHeaders type from @clickhouse/client and @clickhouse/client-web. Previously this type was only available from @clickhouse/client-common; it is now part of the public re-export surface of both flavored packages, alongside the other commonly used types. This is part of an ongoing effort to make @clickhouse/client-common an internal-only package so downstream consumers can depend solely on @clickhouse/client or @clickhouse/client-web. (#758)

#758: ClickHouse/clickhouse-js#758

Bug Fixes

• Enum type parsing now correctly unescapes backslash escape sequences in enum names. Previously, parseEnumType returned enum names with raw escape sequences (e.g., f\' instead of f'). Now it properly decodes escape sequences including \' (single quote), \\ (backslash), \n (newline), \t (tab), and \r (carriage return). This matches the behavior of ClickHouse string literals and ensures consistency with how the client encodes strings when sending data to the server. If you were relying on the previous incorrect behavior where backslash escape sequences were preserved in enum names, you will need to update your code to handle properly unescaped values.

Example:

// Before (incorrect):
parseEnumType({
  columnType: "Enum8('f\\'' = 1)",
  sourceType: "Enum8('f\\'' = 1)",
})
// returned: { values: { 1: "f\\'" } }  // with backslash
// After (correct):
parseEnumType({
columnType: "Enum8('f\'' = 1)",
sourceType: "Enum8('f\'' = 1)",
})
// returns: { values: { 1: "f'" } }     // unescaped

1.18.5

Improvements

• (Node.js only) Added max_response_headers_size client option that forwards the maxHeaderSize option to the underlying http(s).request call. This raises the per-request limit on the total size of HTTP response headers received from the server (Node.js default is ~16 KB). It is most useful when running long-running queries with send_progress_in_http_headers enabled — the X-ClickHouse-Progress headers accumulate over the lifetime of the request and can exceed the default limit, causing the request to fail with HPE_HEADER_OVERFLOW. Setting this option avoids the need to use the global --max-http-header-size Node.js CLI flag or the NODE_OPTIONS environment variable. Has no effect for the Web client (which uses fetch) and no effect when a custom http_agent is configured with a request implementation that does not honor the option.

const client = createClient({
  request_timeout: 400_000,
  max_response_headers_size: 1024 * 1024, // accept up to 1 MiB of response headers
  clickhouse_settings: {
    send_progress_in_http_headers: 1,
    http_headers_progress_interval_ms: '110000',
  },
})

• The @clickhouse/client npm package now ships embedded AI-agent skills, clickhouse-js-node-coding and clickhouse-js-node-troubleshooting, under node_modules/@clickhouse/client/skills/. These skills are also declared in the agents.skills field of the package manifest for discovery tools that scan node_modules. This allows agentic coding tools to load focused, Node-client-specific coding and troubleshooting guidance without any additional setup. (#682)

#682: ClickHouse/clickhouse-js#682

... (truncated)

Commits

• ee91a12 Merge pull request #760 from ClickHouse/main
• 0b10dc9 Update tests/clickhouse-test-runner/package.json
• 5c136e9 chore: fix typo "butes" -> "bytes" in getAsText test comments (#747)
• d595462 Re-export ResponseHeaders from client-node and client-web (#758)
• 7b9a3d9 Polish the coding skill (#755)
• ec817cf [WIP] Fix parseEnumType to unescape enum names (#664)
• 49fa987 Merge E2E Tests workflow into publish workflow (#752)
• ca43c79 Merge pull request #745 from ClickHouse/release-1.19.0
• 2689441 Merge branch 'main' into release-1.19.0
• 8413532 Merge pull request #746 from ClickHouse/copilot/define-clickhouse-js-test-run...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​clickhouse/client since your current version.

Updates @filoz/synapse-core from 0.3.3 to 0.5.2

Release notes

Sourced from @​filoz/synapse-core's releases.

synapse-core: v0.5.2

0.5.2 (2026-05-07)

Bug Fixes

• core: make streaming upload reachable in Node (#776) (3236a27)

synapse-core: v0.5.1

0.5.1 (2026-05-06)

Bug Fixes

• update README.md to provide an overview of the @​filoz/synapse-core package and its utilities (#773) (59e439c)

synapse-core: v0.5.0

0.5.0 (2026-05-05)

⚠ BREAKING CHANGES

• synapse-core: drop fundedUntilEpoch, add grossCoverageInEpochs (#760)
• typehash: existing session keys for DeleteDataSetPermission must be re-minted. Passing a stale session key to Synapse.create() throws because the permission hash no longer matches.

Features

• enhance PDP provider handling with active product checks and add tests (e20d2e5)
• synapse-core: add epochsToHours and epochsToDays utilities (32622ff)
• synapse-core: add runwayInEpochs to account state resolution (d6d566c)
• synapse-core: drop fundedUntilEpoch, add grossCoverageInEpochs (#760) (0b4772c)
• synapse-core: harden encodePDPCapabilities (d5e49cd)
• synapse-core: normalize sp-registry zero-state returns (96b8f2a)
• synapse-core: refactor PDP capability handling and improve validation (4607b96)
• synapse-core: validate sp-registry writes before simulate (d14ca74)

Bug Fixes

• adjust tsconfigs for TypeScript 6 compatibility (a1dc9e5)
• enhance pagination logic and add validation for batch size (#750) (cbe3bd6)
• normalize empty outputs in fwss (#752) (52cd636)
• normalize network error message (#747) (1b18451)
• synapse-core: use FILECOIN_SERVICES_GIT_REF for the ref and add strict validation (#762) (79860d1)
• typehash: rename DeleteDataSet typehash param (#757) (5ce89d0)

Chores

• clarify currentEpoch in resolveAccountState (ca589fa)

... (truncated)

Commits

• 91f83a6 chore(master): release synapse-core 0.5.2 (#778)
• 3236a27 fix(core): make streaming upload reachable in Node (#776)
• 92a799a chore(master): release synapse-sdk 0.41.0 (#748)
• 1bd3d2a chore(master): release synapse-core 0.5.1 (#775)
• abe59a7 chore: simplify deployment commands in workflow files and update build script...
• 59e439c fix: update README.md to provide an overview of the @​filoz/synapse-core packa...
• 090bdb7 chore: update lint scripts to remove --fix option in package.json files (#772)
• 94fa7e6 chore(master): release synapse-core 0.5.0 (#751)
• 0b4772c feat(synapse-core)!: drop fundedUntilEpoch, add grossCoverageInEpochs (#760)
• 79860d1 fix(synapse-core): use FILECOIN_SERVICES_GIT_REF for the ref and add strict v...
• Additional commits viewable in compare view

Updates @ipld/car from 5.4.2 to 5.4.6

Release notes

Sourced from @​ipld/car's releases.

v5.4.6

5.4.6 (2026-05-12)

Trivial Changes

• deps: bump @​ipld/dag-json from 10.2.9 to 11.0.0 in /examples (#184) (eefd849)

Dependencies

• bump @​ipld/dag-cbor from 9.2.7 to 10.0.1 (#182) (a2ab328)

v5.4.5

5.4.5 (2026-05-11)

Trivial Changes

• deps: bump multiformats from 13.4.2 to 14.0.0 in /examples (#181) (d3255f1)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#180) (e1d683e)

v5.4.4

5.4.4 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#179) (a3dca47)

v5.4.3

5.4.3 (2026-04-02)

Trivial Changes

• deps: bump multiformats from 12.1.3 to 13.4.2 in /examples (#176) (2c87540)

Dependencies

• bump cborg from 4.5.8 to 5.0.0 (#178) (40ddb9c)

Changelog

Sourced from @​ipld/car's changelog.

5.4.6 (2026-05-12)

Trivial Changes

• deps: bump @​ipld/dag-json from 10.2.9 to 11.0.0 in /examples (#184) (eefd849)

Dependencies

• bump @​ipld/dag-cbor from 9.2.7 to 10.0.1 (#182) (a2ab328)

5.4.5 (2026-05-11)

Trivial Changes

• deps: bump multiformats from 13.4.2 to 14.0.0 in /examples (#181) (d3255f1)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#180) (e1d683e)

5.4.4 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#179) (a3dca47)

5.4.3 (2026-04-02)

Trivial Changes

• deps: bump multiformats from 12.1.3 to 13.4.2 in /examples (#176) (2c87540)

Dependencies

• bump cborg from 4.5.8 to 5.0.0 (#178) (40ddb9c)

Commits

• 547e433 chore(release): 5.4.6 [skip ci]
• a2ab328 deps: bump @​ipld/dag-cbor from 9.2.7 to 10.0.1 (#182)
• eefd849 chore(deps): bump @​ipld/dag-json from 10.2.9 to 11.0.0 in /examples (#184)
• 55f9112 chore(release): 5.4.5 [skip ci]
• e1d683e deps: bump multiformats from 13.4.2 to 14.0.0 (#180)
• d3255f1 chore(deps): bump multiformats from 13.4.2 to 14.0.0 in /examples (#181)
• ed69005 chore(release): 5.4.4 [skip ci]
• a3dca47 deps(dev): bump aegir from 47.2.0 to 48.0.1 (#179)
• 13d6e56 chore(release): 5.4.3 [skip ci]
• 40ddb9c deps: bump cborg from 4.5.8 to 5.0.0 (#178)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ipld/car since your current version.

Updates @ipld/dag-pb from 4.1.5 to 4.1.7

Release notes

Sourced from @​ipld/dag-pb's releases.

v4.1.7

4.1.7 (2026-05-11)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#109) (81887a9)

v4.1.6

4.1.6 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#108) (d573d19)

Changelog

Sourced from @​ipld/dag-pb's changelog.

4.1.7 (2026-05-11)

Dependencies

• bump multiformats from 13.4.2 to 14.0.0 (#109) (81887a9)

4.1.6 (2026-05-07)

Dependencies

• dev: bump aegir from 47.2.0 to 48.0.1 (#108) (d573d19)

Commits

• 3b870f6 chore(release): 4.1.7 [skip ci]
• 81887a9 deps: bump multiformats from 13.4.2 to 14.0.0 (#109)
• a13ed0c chore(release): 4.1.6 [skip ci]
• d573d19 deps(dev): bump aegir from 47.2.0 to 48.0.1 (#108)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ipld/dag-pb since your current version.

Updates @nestjs/common from 11.1.13 to 11.1.24

Release notes

Sourced from @​nestjs/common's releases.

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core
  • nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #16993 fix(core): inflight request injection bug #16989 (@​kamilmysliwiec)

Enhancements

• core
  • #16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

... (truncated)

Commits

• d8a0ab8 chore(release): publish v11.1.24 release
• 2dccece chore: update readmes
• b8be8c1 chore(release): publish v11.1.23 release
• 801c46f chore(release): publish v11.1.22 release
• 983dd52 chore(release): publish v11.1.21 release
• a0b0139 chore: update readme
• 7caeb3f chore(release): publish v11.1.20 release
• f6a3c2f fix(docs): update some old links in docs
• 4b6420b Merge pull request #16902 from QusaiAlbonni/fix/filetype-validator-buffer-mes...
• 33515ed fix(common): improve missing buffer error message in file type validator
• Additional commits viewable in compare view

Updates @nestjs/config from 4.0.3 to 4.0.4

Release notes

Sourced from @​nestjs/config's releases.

Release 4.0.4

• fix(deps): update dependency dotenv to v17.4.1 (6bc5737)
• fix(deps): update dependency lodash to v4.18.1 [security] (f31ee98)

Commits

• 3b5d592 chore(): release v4.0.4
• 4fbcb03 Merge pull request #2263 from nestjs/renovate/dotenv-17.x
• 33dae89 Merge pull request #2269 from nestjs/renovate/cimg-node-24.x
• 0a727c3 Merge pull request #2313 from nestjs/renovate/npm-lodash-vulnerability
• 6bc5737 fix(deps): update dependency dotenv to v17.4.1
• f31ee98 fix(deps): update dependency lodash to v4.18.1 [security]
• 059314c chore(deps): update dependency typescript-eslint to v8.58.1 (#2315)
• 0f81e2d chore(deps): update dependency eslint to v10.2.0 (#2314)
• e673ab2 chore(deps): update dependency @​types/node to v24.12.2 (#2311)
• b1ede30 chore(deps): update nest monorepo to v11.1.18 (#2312)
• Additional commits viewable in compare view

Updates @nestjs/core from 11.1.13 to 11.1.24

Release notes

Sourced from @​nestjs/core's releases.

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core
  • nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #16993 fix(core): inflight request injection bug #16989 (@​kamilmysliwiec)

Enhancements

• core
  • #16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

... (truncated)

Commits

• d8a0ab8 chore(release): publish v11.1.24 release
• 3ed595e fix(core): keep dependency parent registry internal
• 1b8c8b0 fix(core): propagate dependency tree cache resets
• 4c07009 fix(core): reset dependency tree cache on metadata changes
• ff95b3f Merge pull request #16997 from hbinhng/feat/warn-late-use-websocket-adapter
• 2dccece chore: update readmes
• b8be8c1 chore(release): publish v11.1.23 release
• 5de10df fix: should skip transient providers for snapshots
• d956db4 feat(core): warn on late websocket adapter registration
• 801c46f chore(release): publish v11.1.22 release
• Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.13 to 11.1.24

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core
  • nestjs/nest#16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #16993 fix(core): inflight request injection bug #16989 (@​kamilmysliwiec)

Enhancements

• core
  • #16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

... (truncated)

Commits

• d8a0ab8 chore(release): publish v11.1.24 release
• 2dccece chore: update readmes
• b8be8c1 chore(release): publish v11.1.23 release
• 801c46f chore(release): publish v11.1.22 release
• 983dd52 chore(release): publish v11.1.21 release
• a0b0139 chore: update readme
• 7caeb3f chore(release): publish v11.1.20 release
• f6a3c2f fix(docs): update some old links in docs
• 5e33ecf feat: add MulterOptions and MulterField interfaces for express platform confi...
• 6730995 chore(release): publish v11.1.19 release
• Additional commits viewable in compare view

Updates @nestjs/schedule from 6.1.1 to 6.1.3

Release notes

Sourced from @​nestjs/schedule's releases.

6.1.3

What's Changed

• feat(cron): add initialDelay option to defer first job execution by @​kyungseopk1m in nestjs/schedule#2251

Full Changelog: nestjs/schedule@6.1.2...6.1.3

Release 6.1.2

• Merge pull request #2247 from kyungseopk1m/feat/cron-initial-delay (a57ce2c)
• chore(deps): update dependency prettier to v3.8.3 (#2248) (bb3490d)
• feat(cron): add initialDelay option to defer first job execution (1c5677f)
• Merge pull request #2245 from nestjs/renovate/nest-monorepo (59046bd)
• Merge pull request #2246 from nestjs/renovate/oxlint-monorepo (be4eee3)
• chore(deps): update dependency oxlint to v1.60.0 (32a9ce2)
• chore(deps): update nest monorepo to v11.1.19 (7d3844f)
• chore: migrate to oxlint, vitest, ts6 (29de71b)
• chore(deps): update dependency globals to v17.5.0 (#2244) (6c62cca)
• chore(deps): update dependency sinon to v21.1.2 (#2243) (ee3b31a)
• chore(deps): update dependency sinon to v21.1.1 (#2241) (eba9799)
• Merge pull request #2242 from nestjs/renovate/prettier-3.x (c3ad0f7)
• chore(deps): update dependency prettier to v3.8.2 (798e2a9)
• Merge pull request #2199 from nestjs/renovate/cimg-node-24.x (a05354a)
• chore(deps): update dependency typescript-eslint to v8.58.1 (#2240) (0367ac1)
• chore(deps): update dependency eslint to v10.2.0 (#2239) (fa93e06)
• chore(deps): update nest monorepo to v11.1.18 (#2238) (8cd4c02)
• chore(deps): update dependency @​types/node to v24.12.2 (#2237) (01482df)
• chore(deps): update dependency @​types/sinon to v21.0.1 (#2236) (f05b5bd)
• chore(deps): update dependency ts-jest to v29.4.9 (#2235) (af545e6)
• chore(deps): update dependency typescript-eslint to v8.58.0 (#2233) (4dad22a)
• chore(deps): update node.js to v24.14.1 (28db9bc)
• chore(deps): update dependency eslint to v10.1.0 (#2232) (413f390)
• chore(deps): update nest monorepo to v11.1.17 (#2230) (46c2bc5)
• chore(deps): update dependency typescript-eslint to v8.57.1 (#2231) (8fd063b)
• chore(deps): update dependency sinon to v21.0.3 (#2229) (1671ad9)
• chore(deps): update commitlint monorepo to v20.5.0 (#2228) (2ecd2f1)
• chore(deps): update dependency lint-staged to v16.4.0 (#2227) (aa0de01)
• chore(deps): update commitlint monorepo to v20.4.4 (#2226) (75034fe)
• chore(deps): update dependency lint-staged to v16.3.3 (#2225) (f1c7d31)
• chore(deps): update dependency jest to v30.3.0 (#2224) (1a208d4)
• chore(deps): update dependency typescript-eslint to v8.57.0 (#2223) (60dd2c9)
• chore(deps): update dependency eslint to v10.0.3 (#2221) (791b6ba)
• chore(deps): update dependency @​eslint/eslintrc to v3.3.5 (#2220) (0da1ca7)
• chore(deps): update dependency @​types/node to v24.12.0 (#2219) (934a93e)
• chore(deps): update nest monorepo to v11.1.16 (#2218) (5f44e9b)
• chore(deps): update dependency sinon to v21.0.2 (#2217) (b807746)
• chore(deps): update dependency lint-staged to v16.3.2 (#2216) (4ca32bd)
• chore(deps): update commitlint monorepo to v20.4.3 (#2215) (d3ceb76)
• chore(deps): update nest monorepo to v11.1.15 (#2214) (b084ffc)
• chore(deps): update dependency lint-staged to v16.3.1 (#2213) (8a201b2)
• chore(deps): update dependency globals to v17.4.0 (#2212) (6f61793)
• chore(deps): update dependency lint-staged to v16.3.0 (#2211) (aa9213a)

... (truncated)

Commits

• 059f196 Merge pull request #2249 from nestjs/renovate/release-it-20.x
• 557730e Merge pull request #2251 from kyungseopk1m/feat/cron-initial-delay-v2
• 14f5b80 feat(cron): add initialDelay option to defer first job execution
• 536367d chore(deps): update dependency release-it to v20
• 57e2861 Merge pull request #2250 from nestjs/revert-2247-feat/cron-initial-delay
• e08f457 Revert "feat(cron): add initialDelay option to defer first job execution"
• 3198abe chore(): release v6.1.2
• a57ce2c Merge pull request #2247 from kyungseopk1m/feat/cron-initial-delay
• bb3490d chore(deps): update dependency prettier to v3.8.3 (#2248)
• 1c5677f feat(cron): add initialDelay option to defer first job execution
• Additional commits viewable in compare view

Updates @nestjs/swagger from 11.2.6 to 11.4.4

Release notes

Sourced from @​nestjs/swagger's releases.

Release 11.4.4

11.4.4 (2026-05-21)

Bug fixes

• #3930 fix: top-level nullable with discriminator issue (@​kamilmysliwiec)

Enhancements

• #3921 feat(swagger): add summary field to Tag Object (OpenAPI 3.2) (@​frbuceta)
• #3924 feat(swagger): warn when @​ApiTags receives hierarchy fields (@​frbuceta)
• #3925 fix(swagger): type Tag Object kind as a free-form string (@​frbuceta)

Committers: 4

• Alexander Scholz (@​LucidityDesign)
• Francisco Buceta (@​frbuceta)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Natanael dos Santos Feitosa (@​natanfeitosa)

Release 11.4.3

11.4.3 (2026-05-14)

Bug fixes

• #3910 fix(swagger): support const enum query params (@​yudin-s)
• #3911 fix(swagger-module): return reply from async route handlers (@​tibohaffner)
• #3883 fix(response-object-factory): preserve example/examples for built-in scalar response types (@​yogeshwaran-c)
• #3882 fix(swagger-types-mapper): place multipleOf inside parameter schema (@​yogeshwaran-c)

Enhancements

• #3885 feat(plugin): auto-generate enum metadata for string and number literal union types (@​y-hsgw)
• #3604 feat: added api-include-endpoint (@​TomSpott)
<...

Description has been truncated

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​nestjs/​schematics@​11.1.0
	filecoin-pin@​0.22.3
	@​types/​react@​19.2.16
	@​vitest/​coverage-v8@​4.1.8
	@​types/​node@​25.9.1
	@​nestjs/​typeorm@​11.0.1
	@​willsoto/​nestjs-prometheus@​6.1.0
	class-validator@​0.15.1
	@​nestjs/​cli@​11.0.21
	@​nestjs/​schedule@​6.1.3
	@​nestjs/​config@​4.0.4
	helmet@​8.2.0
	@​nestjs/​swagger@​11.4.4
	@​tailwindcss/​vite@​4.3.0
	assemblyscript@​0.28.17
	date-fns@​4.4.0
	@​swc/​core@​1.15.40
	@​ipld/​dag-pb@​4.1.7
	@​nestjs/​core@​11.1.24
	@​ipld/​car@​5.4.6
	@​nestjs/​common@​11.1.24
	axios@​1.16.1
	@​nestjs/​platform-express@​11.1.24
	@​nestjs/​testing@​11.1.24
	@​biomejs/​biome@​2.4.16
	@​clickhouse/​client@​1.19.0

View full report