fix(deps): update dependency @nestjs/common to v11.0.16 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@nestjs/common (source)	11.0.1 → 11.0.16

GitHub Vulnerability Alerts

CVE-2024-29409

File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.

---

Release Notes

nestjs/nest (@​nestjs/common)

v11.0.16

Compare Source

v11.0.16 (2025-04-11)

• fix(common): use file-type to validate file mimetypes by @​Chathula in #​14881

v11.0.15

Compare Source

v11.0.15 (2025-04-10)

Bug fixes

• platform-fastify
  • #​14935 fix(fastify): methods comparison (@​johaven)

Committers: 1

• Johan Legrand (@​johaven)

v11.0.14

Compare Source

v11.0.14 (2025-04-09)

Bug fixes

• platform-fastify
  • #​14511 fix(fastify): adds the non-standard http methods to the instance (@​johaven)

Committers: 1

• Johan Legrand (@​johaven)

v11.0.13

Compare Source

v11.0.13 (2025-04-03)

Bug fixes

• platform-fastify
  • #​14895 fix(fastify-adapter): global prefix exclusion path handling w/middleware (@​KyleLilly)
• microservices
  • #​14869 fix(microservices): do not re-create client connection once get client by service name (@​mingo023)

Dependencies

• platform-express
  • #​14883 fix(deps): update dependency express to v5.1.0 (@​renovate[bot])
  • #​14817 fix(deps): update dependency multer to v1.4.5-lts.2 (@​renovate[bot])
• platform-fastify
  • #​14861 fix(deps): update dependency fastify to v5.2.2 (@​renovate[bot])
  • #​14864 chore(deps): bump @​fastify/cors from 11.0.0 to 11.0.1 (@​dependabot[bot])

Committers: 2

• Kyle Lilly (@​KyleLilly)
• Minh Ngo (@​mingo023)

v11.0.12

Compare Source

v11.0.12 (2025-03-19)

Bug fixes

• core
  • #​14803 fix(core): infinite loop on broken circular reference (@​kamilmysliwiec)
  • #​14792 dependencies not resolving for request-scoped lazy providers (@​anizozina)

Enhancements

• core
  • #​14802 feat(core): add options to the legacy route converter (@​kamilmysliwiec)

v11.0.11

Compare Source

v11.0.11 (2025-02-28)

Enhancements

• platform-fastify
  • #​14677 perf: Switch deprecated parser querystring for fast-querystring (@​smith558)

Dependencies

• platform-fastify
  • #​14711 fix(deps): update dependency @​fastify/cors to v11 (@​renovate[bot])
• platform-ws
  • #​14689 chore(deps): bump ws from 8.18.0 to 8.18.1 (@​dependabot[bot])

Committers: 1

• Stanislav (Stanley) Modrak (@​smith558)

v11.0.10

Compare Source

v11.0.10 (2025-02-17)

Bug fixes

• microservices
  • #​14605 fix(microservices): server send drops emitted value (@​shprota)
• platform-express
  • #​14640 fix(platform-express) respect custom parser middlewares in Express 5 (@​luddwichr)

v11.0.9

Compare Source

v11.0.9 (2025-02-10)

Bug fixes

• core
  • #​14597 perf(core): use topology tree for calculating distance (depth) (@​kamilmysliwiec)
• common
  • #​14579 fix(common): revert to original value (swc builders regression) (@​kamilmysliwiec)

Committers: 2

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.0.8

Compare Source

v11.0.8 (2025-02-06)

Bug fixes

• common
  • #​14546 fix(common): addLeadingSlash optional group support (@​dcharbonnier)
• platform-express
  • #​14574 fix(platform-express) make check for existing middlewares work with Express 5 (@​luddwichr)

Committers: 4

• Ghassen Rjab (@​GhassenRjab)
• Shay Molcho (@​shaymolcho)
• @​dcharbonnier
• @​luddwichr

v11.0.7

Compare Source

v11.0.7 (2025-01-31)

Bug fixes

• core
  • #​14523 fix: middleware sort issues (@​rbnayax)

Committers: 1

• @​rbnayax

v11.0.6

Compare Source

v11.0.6 (2025-01-27)

Bug fixes

• core
  • #​14522 fix(core): allow optional named wildcard groups (@​kamilmysliwiec)

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.0.5

Compare Source

v11.0.5 (2025-01-23)

Bug fixes

• core
  • #​14495 fix(core): global module middleware should be executed first (@​kamilmysliwiec)

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.0.4

Compare Source

v11.0.3

Compare Source

v11.0.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.