Upgrades / Nest 11 (#3407)

Author: CarsonF

.yarn/patches/@whatwg-node-fetch-npm-0.9.22-a60314fb39.patch renamed to .yarn/patches/@whatwg-node-fetch-npm-0.10.6-bca79028fb.patch

@@ -1,5 +1,5 @@
 diff --git a/dist/index.d.ts b/dist/index.d.ts
-index d16ddf2f4e30e75c5b04044af34e8286b2e8b0a5..9f56feb61efa75a40c815fd56f11642719d41737 100644
+index f55c0838ebf3aee24ec547d21ec67dc709ab7c8f..b6606e35b73f3c985f18fe66e924ec2218e35a7b 100644
 --- a/dist/index.d.ts
 +++ b/dist/index.d.ts
 @@ -1,5 +1,3 @@

package.json

@@ -2,7 +2,7 @@
   "name": "cord-api-v3",
   "version": "3.0.0",
   "license": "MIT",
-  "packageManager": "yarn@4.5.1",
+  "packageManager": "yarn@4.9.1",
   "engines": {
     "node": ">= 20.6"
   },
@@ -33,28 +33,28 @@
   "dependencies": {
     "@aws-sdk/client-s3": "^3.440.0",
     "@aws-sdk/s3-request-presigner": "^3.440.0",
-    "@faker-js/faker": "^8.2.0",
+    "@faker-js/faker": "^9.7.0",
     "@fastify/compress": "^8.0.1",
     "@fastify/cookie": "^11.0.1",
-    "@fastify/cors": "^10.0.1",
+    "@fastify/cors": "^11.0.1",
     "@ffprobe-installer/ffprobe": "^2.1.2",
     "@golevelup/nestjs-discovery": "^4.0.0",
-    "@graphql-hive/yoga": "^0.38.2",
+    "@graphql-hive/yoga": ">=0.41.0",
     "@graphql-tools/utils": "^10.5.4",
     "@graphql-yoga/plugin-apq": "^3.7.0",
     "@leeoniya/ufuzzy": "^1.0.11",
-    "@nestjs/common": "^10.2.7",
-    "@nestjs/core": "^10.2.7",
-    "@nestjs/graphql": "^12.0.9",
-    "@nestjs/platform-fastify": "^10.4.3",
+    "@nestjs/common": "^11.1.0",
+    "@nestjs/core": "^11.1.0",
+    "@nestjs/graphql": "^13.1.0",
+    "@nestjs/platform-fastify": "^11.1.0",
     "@patarapolw/prettyprint": "^1.0.3",
     "@seedcompany/cache": "^3.0.2",
     "@seedcompany/common": ">=0.17 <1",
     "@seedcompany/data-loader": "^2.0.1",
     "@seedcompany/nest": "^1.4.0",
     "@seedcompany/nestjs-email": "^4.1.1",
     "@seedcompany/scripture": ">=0.8.0",
-    "argon2": "^0.31.1",
+    "argon2": "^0.43.0",
     "aws-xray-sdk-core": "^3.5.3",
     "chalk": "^5.3.0",
     "class-transformer": "^0.5.1",
@@ -64,23 +64,23 @@
     "common-tags": "^1.8.2",
     "cypher-query-builder": "patch:cypher-query-builder@npm%3A6.0.4#~/.yarn/patches/cypher-query-builder-npm-6.0.4-e8707a5e8e.patch",
     "dotenv": "^16.3.1",
-    "dotenv-expand": "^10.0.0",
-    "execa": "^8.0.1",
+    "dotenv-expand": "^12.0.2",
+    "execa": "^9.5.2",
     "extensionless": "^1.7.0",
     "fast-safe-stringify": "^2.1.1",
     "fastest-levenshtein": "^1.0.16",
     "fastify": "^5.0.0",
     "fastify-raw-body": "^5.0.0",
-    "file-type": "^18.6.0",
+    "file-type": "^20.5.0",
     "gel": "^2.1.0-canary.20250319T143140",
-    "glob": "^10.3.10",
+    "glob": "^11.0.2",
     "got": "^14.3.0",
     "graphql": "^16.9.0",
     "graphql-parse-resolve-info": "^4.14.0",
     "graphql-scalars": "^1.22.4",
-    "graphql-yoga": "^5.7.0",
+    "graphql-yoga": "^5.13.4",
     "human-format": "^1.2.0",
-    "image-size": "^1.0.2",
+    "image-size": "^2.0.2",
     "indent-string": "^5.0.0",
     "ioredis": "^5.3.2",
     "iso-3166-1": "^2.1.1",
@@ -90,48 +90,48 @@
     "lodash": "npm:lodash-es@^4.17.21",
     "lru-cache": "^11.0.1",
     "luxon": "^3.5.0",
-    "mime": "beta",
-    "nanoid": "^4.0.2",
+    "mime": "^4.0.7",
+    "nanoid": "^5.1.5",
     "neo4j-driver": "^5.28.1",
     "p-retry": "^6.2.1",
-    "pkg-up": "^4.0.0",
     "plur": "^5.1.0",
     "prismjs-terminal": "^1.2.3",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
-    "reflect-metadata": "^0.1.13",
-    "rimraf": "^5.0.5",
+    "read-package-up": "^11.0.0",
+    "reflect-metadata": "^0.2.2",
+    "rimraf": "^6.0.1",
     "rxjs": "^7.8.1",
     "sanitize-filename": "^1.6.3",
     "title-case": "^4.3.1",
-    "ts-essentials": "^9.4.1",
+    "ts-essentials": "^10.0.4",
     "urlpattern-polyfill": "^10.0.0",
-    "uuid": "^10.0.0",
+    "uuid": "^11.1.0",
+    "validator": "^13.15.0",
     "winston": "^3.11.0",
-    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.0/xlsx-0.20.0.tgz",
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
     "xregexp": "^5.1.1",
     "yaml": "^2.3.3"
   },
   "devDependencies": {
     "@gel/generate": "^0.7.0-canary.20250422T080308",
-    "@graphql-hive/cli": "^0.44.2",
-    "@nestjs/cli": "^10.2.1",
-    "@nestjs/schematics": "^10.0.3",
-    "@nestjs/testing": "^10.2.7",
+    "@graphql-hive/cli": ">=0.44",
+    "@nestjs/cli": "^11.0.7",
+    "@nestjs/schematics": "^11.0.5",
+    "@nestjs/testing": "^11.1.0",
     "@seedcompany/eslint-plugin": "^3.4.1",
     "@tsconfig/strictest": "^2.0.2",
     "@types/common-tags": "^1.8.3",
     "@types/ffprobe": "^1.1.7",
     "@types/jest": "^29.5.7",
     "@types/jsonwebtoken": "^9.0.4",
     "@types/lodash": "^4.14.200",
-    "@types/luxon": "^3.4.2",
+    "@types/luxon": "^3.6.2",
     "@types/node": "^22.7.8",
     "@types/prismjs": "^1.26.2",
     "@types/react": "^18.2.33",
-    "@types/stack-trace": "^0.0.32",
+    "@types/stack-trace": "^0.0.33",
     "@types/triple-beam": "^1.3.4",
-    "@types/uuid": "^10.0.0",
     "@types/validator": "^13.11.5",
     "@typescript-eslint/parser": "^5.62.0",
     "debugger-is-attached": "^1.2.0",
@@ -140,28 +140,33 @@
     "eslint-plugin-typescript-sort-keys": "^2.3.0",
     "husky": "^4.3.8",
     "jest": "^29.7.0",
-    "lint-staged": "^14.0.1",
+    "lint-staged": "^15.5.1",
+    "npm-check-updates": "^18.0.1",
     "ts-jest": "^29.1.1",
-    "ts-morph": "^19.0.0",
+    "ts-morph": "^25.0.1",
     "ts-node": "^10.9.1",
     "ts-patch": "^3.0.2",
     "ts-transformer-keys": "^0.4.4",
     "type-fest": "^4.15.0",
-    "typescript": "^5.2.2",
+    "typescript": "~5.2.2",
     "typescript-transform-paths": "^3.4.6"
   },
   "resolutions": {
     "cypher-query-builder/neo4j-driver": "^5",
+    "@angular-devkit/core": "^19.2",
+    "@angular-devkit/schematics": "^19.2",
     "@nestjs/cli/fork-ts-checker-webpack-plugin": "npm:empty-npm-package@*",
+    "@nestjs/cli/glob": "^11",
     "@nestjs/cli/webpack": "npm:empty-npm-package@*",
-    "@nestjs/cli/typescript": "^5.1.6",
-    "@nestjs/graphql/graphql-ws": "^5",
-    "@nestjs/platform-fastify/@fastify/cors": "^10",
-    "@nestjs/platform-fastify/@fastify/formbody": "^8",
-    "@nestjs/platform-fastify/@fastify/middie": "^9",
-    "@nestjs/platform-fastify/fastify": "^5",
-    "@nestjs/platform-fastify/light-my-request": "^6",
-    "@whatwg-node/fetch": "patch:@whatwg-node/fetch@npm%3A0.9.22#~/.yarn/patches/@whatwg-node-fetch-npm-0.9.22-a60314fb39.patch",
+    "@nestjs/cli/typescript": "~5.2.2",
+    "@whatwg-node/fetch@npm:^0.10.0": "patch:@whatwg-node/fetch@npm%3A0.10.6#~/.yarn/patches/@whatwg-node-fetch-npm-0.10.6-bca79028fb.patch",
+    "@whatwg-node/fetch@npm:^0.10.1": "patch:@whatwg-node/fetch@npm%3A0.10.6#~/.yarn/patches/@whatwg-node-fetch-npm-0.10.6-bca79028fb.patch",
+    "@whatwg-node/fetch@npm:^0.10.4": "patch:@whatwg-node/fetch@npm%3A0.10.6#~/.yarn/patches/@whatwg-node-fetch-npm-0.10.6-bca79028fb.patch",
+    "@whatwg-node/fetch@npm:^0.10.6": "patch:@whatwg-node/fetch@npm%3A0.10.6#~/.yarn/patches/@whatwg-node-fetch-npm-0.10.6-bca79028fb.patch",
+    "logform": "2.6.1",
+    "process-warning": "^5",
+    "rxjs": "^7.8",
+    "secure-json-parse": "^4",
     "subscriptions-transport-ws": "npm:empty-npm-package@*"
   },
   "dependenciesMeta": {

src/common/generate-id.ts

@@ -1,4 +1,4 @@
-import { customAlphabet } from 'nanoid/async';
+import { customAlphabet } from 'nanoid';
 import { ID } from './id-field';
 
 // 100 IDs / hour = 1k years to have 1% probability of a single collision

src/common/temporal/calendar-date.ts

@@ -1,4 +1,8 @@
-import { setInspectOnClass, setToStringTag } from '@seedcompany/common';
+import {
+  type NonEmptyArray,
+  setInspectOnClass,
+  setToStringTag,
+} from '@seedcompany/common';
 import {
   DateObjectUnits,
   DateTime,
@@ -160,13 +164,19 @@ export class CalendarDate<IsValid extends boolean = DefaultValidity>
   static max(): undefined;
   static max(...dateTimes: DateTime[]): CalendarDate;
   static max(...dateTimes: DateTime[]): CalendarDate | undefined {
-    return CalendarDate.fromDateTime(super.max(...dateTimes));
+    if (dateTimes.length === 0) return undefined;
+    return CalendarDate.fromDateTime(
+      super.max(...(dateTimes as unknown as NonEmptyArray<DateTime>)),
+    );
   }
 
   static min(): undefined;
   static min(...dateTimes: DateTime[]): CalendarDate;
   static min(...dateTimes: DateTime[]): CalendarDate | undefined {
-    return CalendarDate.fromDateTime(super.min(...dateTimes));
+    if (dateTimes.length === 0) return undefined;
+    return CalendarDate.fromDateTime(
+      super.min(...(dateTimes as unknown as NonEmptyArray<DateTime>)),
+    );
   }
 
   static utc(

src/common/url.field.ts

@@ -3,7 +3,7 @@ import { CustomScalar, Field, FieldOptions, Scalar } from '@nestjs/graphql';
 import { IsUrl } from 'class-validator';
 import { GraphQLError, Kind, ValueNode } from 'graphql';
 import { URL } from 'url';
-import ValidatorJS from 'validator';
+import * as ValidatorJS from 'validator';
 
 export const UrlField = ({
   url,

src/common/validators/email.validator.ts

@@ -1,5 +1,5 @@
 import { isEmail, ValidationOptions } from 'class-validator';
-import ValidatorJS from 'validator';
+import * as ValidatorJS from 'validator';
 import { ValidateBy } from './validateBy';
 
 export const IsEmail = (

src/components/authentication/crypto.service.ts

@@ -1,7 +1,5 @@
 import { Injectable } from '@nestjs/common';
 import * as argon2 from 'argon2';
-import { pickBy } from 'lodash';
-import { Except } from 'type-fest';
 import { ConfigService } from '~/core';
 
 @Injectable()
@@ -17,12 +15,10 @@ export class CryptoService {
   }
 
   private get argon2Options() {
-    const options: Except<argon2.Options, 'raw'> = {
-      secret: this.config.passwordSecret
-        ? Buffer.from(this.config.passwordSecret, 'utf-8')
-        : undefined,
-    };
-    // argon doesn't like undefined values even though the types allow them
-    return pickBy(options, (v) => v !== undefined);
+    return {
+      ...(this.config.passwordSecret && {
+        secret: Buffer.from(this.config.passwordSecret, 'utf-8'),
+      }),
+    } satisfies argon2.Options;
   }
 }

src/components/authorization/policy/policy.module.ts

@@ -1,4 +1,5 @@
 import { Module } from '@nestjs/common';
+import { CoreModule } from '~/core';
 import { RoleAndExpUnionOptimizer } from '../policies/conditions/role-and-exp-union.optimizer';
 import { VariantAndExpUnionOptimizer } from '../policies/conditions/variant-and-exp-union.optimizer';
 import { FlattenAggregateOptimizer } from './conditions/flatten-aggregate.optimizer';
@@ -11,6 +12,7 @@ import { GrantersFactory } from './granters.factory';
 import { PolicyFactory } from './policy.factory';
 
 @Module({
+  imports: [CoreModule],
   providers: [
     GrantersFactory,
     PolicyFactory,

src/components/file/media/media-detector.service.ts

@@ -4,7 +4,7 @@ import { CachedByArg as Once } from '@seedcompany/common';
 import { $, execa } from 'execa';
 import { FFProbeResult } from 'ffprobe';
 import { imageSize } from 'image-size';
-import { ISize as ImageSize } from 'image-size/dist/types/interface';
+import type { ISize as ImageSize } from 'image-size/types/interface';
 import { Except } from 'type-fest';
 import { retry } from '~/common/retry';
 import { ILogger, Logger } from '~/core';

src/core/config/version.service.ts

@@ -1,9 +1,7 @@
 import { OnModuleInit } from '@nestjs/common';
-import { execaCommand as command } from 'execa';
-import { promises as fs } from 'fs';
+import { $ } from 'execa';
 import { LazyGetter } from 'lazy-get-decorator';
-import { pkgUp } from 'pkg-up';
-import { PackageJson } from 'type-fest';
+import { readPackageUp } from 'read-package-up';
 import { ILogger, Logger } from '../logger';
 import { ConfigService } from './config.service';
 import { EnvironmentService } from './environment.service';
@@ -42,7 +40,7 @@ export class VersionService implements OnModuleInit {
       return env;
     }
     try {
-      const res = await command('git symbolic-ref -q --short HEAD');
+      const res = await $`git symbolic-ref -q --short HEAD`;
       return res.stdout;
     } catch (e) {
       return undefined;
@@ -55,22 +53,20 @@ export class VersionService implements OnModuleInit {
       return env;
     }
     try {
-      const res = await command('git rev-parse -q --short HEAD');
+      const res = await $`git rev-parse -q --short HEAD`;
       return res.stdout;
     } catch (e) {
       return undefined;
     }
   }
 
   private async fromPackageJson() {
-    const packageJson = await pkgUp();
-    if (!packageJson) {
+    const res = await readPackageUp();
+    if (!res) {
       return undefined;
     }
     try {
-      const str = await fs.readFile(packageJson, { encoding: 'utf8' });
-      const json: PackageJson = JSON.parse(str);
-      return json.version;
+      return res.packageJson.version;
     } catch (e) {
       return undefined;
     }