fix(deps): pin dependencies by renovate[bot] · Pull Request #563 · openmfp/portal

renovate · 2025-06-14T14:37:52Z

This PR contains the following updates:

Package	Type	Update	Change
@nestjs/cli	devDependencies	pin	`^11.0.10` → `11.0.10`
@nestjs/common (source)	dependencies	patch	`^11.1.8` → `^11.1.13`
@nestjs/core (source)	dependencies	patch	`^11.1.8` → `^11.1.13`
@nestjs/platform-express (source)	dependencies	patch	`^11.1.8` → `^11.1.13`
@nestjs/schematics	devDependencies	pin	`^11.0.9` → `11.0.9`
@nestjs/testing (source)	devDependencies	pin	`^11.1.8` → `11.1.8`
axios (source)	dependencies	patch	`^1.6.3` → `^1.13.5`

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

Release Notes

nestjs/nest (@nestjs/common)

`v11.1.13`

Compare Source

`v11.1.12`

Compare Source

v11.1.12 (2026-01-15)

Bug fixes

common
- #16187 fix(common): regression in loading file-type under Windows OS (@iamkanguk97)

Dependencies

platform-ws
- #16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@dependabot[bot])
common
- #16155 fix(deps): update dependency file-type to v21.3.0 (@renovate[bot])
platform-fastify
- #16154 fix(deps): update dependency find-my-way to v9.4.0 (@renovate[bot])

Committers: 3

Antonio Tripodi (@Tony133)
KANGUK LEE (@iamkanguk97)
@miso-kyoungminkim

`v11.1.11`

Compare Source

v11.1.11 (2025-12-29)

Bug fixes

platform-fastify
- #16135 fix(platform-fastify): middie bypassing through decoded chars (@kamilmysliwiec)
core
- #16133 fix(core): add missing catch handler for forward-ref provider resolution (@coti-z)

Dependencies

platform-socket.io
- #16125 fix(deps): update dependency socket.io to v4.8.3 (@renovate[bot])
- #16114 chore(deps): bump socket.io from 4.8.1 to 4.8.2 (@dependabot[bot])
platform-fastify
- #16130 fix(deps): update dependency @fastify/static to v9 (@renovate[bot])
common
- #16127 chore(deps): bump file-type from 21.1.1 to 21.2.0 (@dependabot[bot])

Committers: 3

Himanshu Gupta (@manureja64)
Kamil Mysliwiec (@kamilmysliwiec)
coti (@coti-z)

`v11.1.10`

Compare Source

v11.1.10 (2025-12-22)

Bug fixes

core
- #16098 fix(core): instantiate nested transient providers in static context (@mag123c)
- #16005 fix(core): resolve all providers when using resolve() with each option (@malkovitc)
microservices
- #16072 fix(microservices): fix grpc stream method return type (@shash-hq)
common
- #16077 fix(common): resolve file-type path explicitly (@shash-hq)
- #16013 fix(common): Support fallbackToMimetype without buffer (@chenjieya)

Enhancements

common
- #16100 fix(common): improve error handling in FileTypeValidator (@malkovitc)
- #16060 feat(common): add message property to file type validator (@Jo-Minseok)
- #16079 fix: enhance ValidationPipe (@liu-jin-yi)
core
- #15721 feat(core): add Promise support for SSE handlers (@pythonjsgo)
microservices
- #15975 feat(microservices): add keepalive support for server side (@OlegStrokan)
common, core
- #15986 feat(core): add option for async logger compatibility (@mag123c)

Dependencies

platform-fastify
- #16041 fix(deps): update dependency @fastify/cors to v11.2.0 (@renovate[bot])
platform-express
- #16002 fix(deps): update dependency express to v5.2.1 (@renovate[bot])
common
- #15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@dependabot[bot])

Committers: 11

Alexander (@pythonjsgo)
J_Coder (@Jo-Minseok)
Luke Son (@KAPUIST)
Oleh Strokan (@OlegStrokan)
Praveen Somasundaram (@som14062005)
Shashank (@shash-hq)
@chenjieya
@giorgikakauridze
@mag123c
chernomortsev evgeny (@malkovitc)
liu-jin-yi (@liu-jin-yi)

nestjs/nest (@nestjs/core)

`v11.1.13`

Compare Source

`v11.1.12`

Compare Source

v11.1.12 (2026-01-15)

Bug fixes

common
- #16187 fix(common): regression in loading file-type under Windows OS (@iamkanguk97)

Dependencies

platform-ws
- #16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@dependabot[bot])
common
- #16155 fix(deps): update dependency file-type to v21.3.0 (@renovate[bot])
platform-fastify
- #16154 fix(deps): update dependency find-my-way to v9.4.0 (@renovate[bot])

Committers: 3

Antonio Tripodi (@Tony133)
KANGUK LEE (@iamkanguk97)
@miso-kyoungminkim

`v11.1.11`

Compare Source

v11.1.11 (2025-12-29)

Bug fixes

platform-fastify
- #16135 fix(platform-fastify): middie bypassing through decoded chars (@kamilmysliwiec)
core
- #16133 fix(core): add missing catch handler for forward-ref provider resolution (@coti-z)

Dependencies

platform-socket.io
- #16125 fix(deps): update dependency socket.io to v4.8.3 (@renovate[bot])
- #16114 chore(deps): bump socket.io from 4.8.1 to 4.8.2 (@dependabot[bot])
platform-fastify
- #16130 fix(deps): update dependency @fastify/static to v9 (@renovate[bot])
common
- #16127 chore(deps): bump file-type from 21.1.1 to 21.2.0 (@dependabot[bot])

Committers: 3

Himanshu Gupta (@manureja64)
Kamil Mysliwiec (@kamilmysliwiec)
coti (@coti-z)

`v11.1.10`

Compare Source

v11.1.10 (2025-12-22)

Bug fixes

core
- #16098 fix(core): instantiate nested transient providers in static context (@mag123c)
- #16005 fix(core): resolve all providers when using resolve() with each option (@malkovitc)
microservices
- #16072 fix(microservices): fix grpc stream method return type (@shash-hq)
common
- #16077 fix(common): resolve file-type path explicitly (@shash-hq)
- #16013 fix(common): Support fallbackToMimetype without buffer (@chenjieya)

Enhancements

common
- #16100 fix(common): improve error handling in FileTypeValidator (@malkovitc)
- #16060 feat(common): add message property to file type validator (@Jo-Minseok)
- #16079 fix: enhance ValidationPipe (@liu-jin-yi)
core
- #15721 feat(core): add Promise support for SSE handlers (@pythonjsgo)
microservices
- #15975 feat(microservices): add keepalive support for server side (@OlegStrokan)
common, core
- #15986 feat(core): add option for async logger compatibility (@mag123c)

Dependencies

platform-fastify
- #16041 fix(deps): update dependency @fastify/cors to v11.2.0 (@renovate[bot])
platform-express
- #16002 fix(deps): update dependency express to v5.2.1 (@renovate[bot])
common
- #15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@dependabot[bot])

Committers: 11

Alexander (@pythonjsgo)
J_Coder (@Jo-Minseok)
Luke Son (@KAPUIST)
Oleh Strokan (@OlegStrokan)
Praveen Somasundaram (@som14062005)
Shashank (@shash-hq)
@chenjieya
@giorgikakauridze
@mag123c
chernomortsev evgeny (@malkovitc)
liu-jin-yi (@liu-jin-yi)

nestjs/nest (@nestjs/platform-express)

`v11.1.13`

Compare Source

v11.1.13 (2026-02-03)

Bug fixes

common
- #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

microservices
- #16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)
- #16262 Feat/microservices configurable max buffer size (@jobnow)
common
- #16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

platform-fastify
- #16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])
platform-express
- #16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

Lee Donghyun (@devizi0)
Mykhailo Skrypsky (@mixator)
Neo (@chojs23)
Praveen Somasundaram (@som14062005)
Ricardo Gomes (@jobnow)
조수민 (@suuuuuuminnnnnn)

`v11.1.12`

Compare Source

v11.1.12 (2026-01-15)

Bug fixes

common
- #16187 fix(common): regression in loading file-type under Windows OS (@iamkanguk97)

Dependencies

platform-ws
- #16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@dependabot[bot])
common
- #16155 fix(deps): update dependency file-type to v21.3.0 (@renovate[bot])
platform-fastify
- #16154 fix(deps): update dependency find-my-way to v9.4.0 (@renovate[bot])

Committers: 3

Antonio Tripodi (@Tony133)
KANGUK LEE (@iamkanguk97)
@miso-kyoungminkim

`v11.1.11`

Compare Source

v11.1.11 (2025-12-29)

Bug fixes

platform-fastify
- #16135 fix(platform-fastify): middie bypassing through decoded chars (@kamilmysliwiec)
core
- #16133 fix(core): add missing catch handler for forward-ref provider resolution (@coti-z)

Dependencies

platform-socket.io
- #16125 fix(deps): update dependency socket.io to v4.8.3 (@renovate[bot])
- #16114 chore(deps): bump socket.io from 4.8.1 to 4.8.2 (@dependabot[bot])
platform-fastify
- #16130 fix(deps): update dependency @fastify/static to v9 (@renovate[bot])
common
- #16127 chore(deps): bump file-type from 21.1.1 to 21.2.0 (@dependabot[bot])

Committers: 3

Himanshu Gupta (@manureja64)
Kamil Mysliwiec (@kamilmysliwiec)
coti (@coti-z)

`v11.1.10`

Compare Source

v11.1.10 (2025-12-22)

Bug fixes

core
- #16098 fix(core): instantiate nested transient providers in static context (@mag123c)
- #16005 fix(core): resolve all providers when using resolve() with each option (@malkovitc)
microservices
- #16072 fix(microservices): fix grpc stream method return type (@shash-hq)
common
- #16077 fix(common): resolve file-type path explicitly (@shash-hq)
- #16013 fix(common): Support fallbackToMimetype without buffer (@chenjieya)

Enhancements

common
- #16100 fix(common): improve error handling in FileTypeValidator (@malkovitc)
- #16060 feat(common): add message property to file type validator (@Jo-Minseok)
- #16079 fix: enhance ValidationPipe (@liu-jin-yi)
core
- #15721 feat(core): add Promise support for SSE handlers (@pythonjsgo)
microservices
- #15975 feat(microservices): add keepalive support for server side (@OlegStrokan)
common, core
- #15986 feat(core): add option for async logger compatibility (@mag123c)

Dependencies

platform-fastify
- #16041 fix(deps): update dependency @fastify/cors to v11.2.0 (@renovate[bot])
platform-express
- #16002 fix(deps): update dependency express to v5.2.1 (@renovate[bot])
common
- #15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@dependabot[bot])

Committers: 11

Alexander (@pythonjsgo)
J_Coder (@Jo-Minseok)
Luke Son (@KAPUIST)
Oleh Strokan (@OlegStrokan)
Praveen Somasundaram (@som14062005)
Shashank (@shash-hq)
@chenjieya
@giorgikakauridze
@mag123c
chernomortsev evgeny (@malkovitc)
liu-jin-yi (@liu-jin-yi)

axios/axios (axios)

`v1.13.5`

Compare Source

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

Fix/5657. (PR #7313)
Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

Add input validation to isAbsoluteURL. (PR #7326)
Refactor: bump minor package versions. (PR #7356)

Documentation

Clarify object-check comment. (PR #7323)
Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

Chore: fix issues with YAML. (PR #7355)
CI: update workflow YAMLs. (PR #7372)
CI: fix run condition. (PR #7373)
Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

@sachin11063 (first contribution — PR #7323)
@asmitha-16 (first contribution — PR #7326)

Full Changelog: axios/axios@v1.13.4...v1.13.5

`v1.13.4`

Compare Source

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

fix: issues with version 1.13.3 (#7352) (ee90dfc)
- Fixed issues discovered in v1.13.3 release
- Cleaned up interceptor test files
- Improved workflow configurations

Infrastructure & CI/CD

refactor: ci and build (#7340) (8ff6c19)
- Major refactoring of CI/CD workflows
- Consolidated workflow files for better maintainability
- Added mise configuration for the development environment
- Improved sponsor block update automation
- Enhanced issue and PR templates
- Added automatic release notes generation
- Implemented workflow cancellation for concurrent runs
chore: codegen and some updates to workflows (76cf77b)
- Code generation improvements
- Workflow optimisations

Migration Notes

Breaking Changes

None in this release.

Deprecations

None in this release.

Contributors

Thank you to all contributors who made this release possible! Special thanks to:

jasonsaayman - Release management and CI/CD improvements

`v1.13.3`

Compare Source

Bug Fixes

http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
interceptor: handle the error in the same interceptor (#6269) (5945e40)
main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

add undefined as a value in AxiosRequestConfig (#5560) (095033c)
add automatic minor and patch upgrades to dependabot (#6053) (65a7584)
add Node.js coverage script using c8 (closes #7289) (#7294) (ec9d94e)
added copilot instructions (3f83143)
compatibility with frozen prototypes (#6265) (860e033)
enhance pipeFileToResponse with error handling (#7169) (88d7884)
types: Intellisense for string literals in a widened union (#6134) (f73474d), closes /github.com/microsoft/TypeScript/issues/33471#issuecomment-1376364329

Reverts

Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions bot added the fix label Jun 14, 2025

renovate bot force-pushed the renovate/nestjs branch from 9807aef to 3de846d Compare June 14, 2025 20:07

renovate bot force-pushed the renovate/nestjs branch from 3de846d to 6233c15 Compare June 22, 2025 13:30

renovate bot force-pushed the renovate/nestjs branch from 6233c15 to 998f5ca Compare July 2, 2025 16:07

renovate bot force-pushed the renovate/nestjs branch from 998f5ca to 8113050 Compare July 23, 2025 07:58

renovate bot changed the title ~~fix(deps): update dependency axios to v1.10.0~~ fix(deps): update nestjs Jul 23, 2025

renovate bot force-pushed the renovate/nestjs branch from 8113050 to f0c8aac Compare August 10, 2025 13:40

renovate bot force-pushed the renovate/nestjs branch from f0c8aac to 5bc24d6 Compare August 19, 2025 18:46

renovate bot force-pushed the renovate/nestjs branch from 5bc24d6 to 07e5340 Compare September 12, 2025 08:00

renovate bot changed the title ~~fix(deps): update nestjs~~ fix(deps): update nestjs to v10.4.20 Sep 13, 2025

renovate bot force-pushed the renovate/nestjs branch from 07e5340 to 7503e0c Compare September 13, 2025 23:16

renovate bot force-pushed the renovate/nestjs branch from 7503e0c to 3a35597 Compare September 22, 2025 16:52

renovate bot changed the title ~~fix(deps): update nestjs to v10.4.20~~ fix(deps): update nestjs Sep 22, 2025

renovate bot force-pushed the renovate/nestjs branch from 3a35597 to c62feb0 Compare September 25, 2025 16:53

renovate bot changed the title ~~fix(deps): update nestjs~~ chore(deps): update nestjs Sep 25, 2025

renovate bot force-pushed the renovate/nestjs branch 2 times, most recently from 3c0a6ff to 8430840 Compare October 28, 2025 22:44

renovate bot changed the title ~~chore(deps): update nestjs~~ fix(deps): pin dependencies Oct 30, 2025

renovate bot force-pushed the renovate/nestjs branch 12 times, most recently from a68a802 to d7d0dc1 Compare November 4, 2025 16:58

renovate bot force-pushed the renovate/nestjs branch 6 times, most recently from 9bddfff to d8e1f40 Compare January 13, 2026 01:15

renovate bot force-pushed the renovate/nestjs branch 7 times, most recently from 0885dce to b4d19f8 Compare January 20, 2026 01:58

renovate bot force-pushed the renovate/nestjs branch 10 times, most recently from 83a4d69 to 3edec49 Compare January 27, 2026 18:44

renovate bot force-pushed the renovate/nestjs branch 4 times, most recently from 8ed1ee3 to 51a8a09 Compare February 5, 2026 01:14

renovate bot force-pushed the renovate/nestjs branch from 51a8a09 to d2dd3f1 Compare February 6, 2026 01:03

fix(deps): pin dependencies

9e78a58

renovate bot force-pushed the renovate/nestjs branch from d2dd3f1 to 9e78a58 Compare February 8, 2026 12:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): pin dependencies#563

fix(deps): pin dependencies#563
renovate[bot] wants to merge 1 commit intomainfrom
renovate/nestjs

renovate bot commented Jun 14, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Jun 14, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

Dependencies

Committers: 3

v11.1.10 (2025-12-22)

Bug fixes

Enhancements

Dependencies

Committers: 11

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

Dependencies

Committers: 3

v11.1.10 (2025-12-22)

Bug fixes

Enhancements

Dependencies

Committers: 11

v11.1.13 (2026-02-03)

Bug fixes

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

Dependencies

Committers: 3

v11.1.10 (2025-12-22)

Bug fixes

Enhancements

Dependencies

Committers: 11

Release 1.13.5

Highlights

Changes

Security

Fixes

Features / Improvements

Documentation

CI / Maintenance

New Contributors

Overview

What's New in v1.13.4

Bug Fixes

Infrastructure & CI/CD

Migration Notes

Breaking Changes

Deprecations

Contributors

Bug Fixes

Features

Reverts

Contributors to this release

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jun 14, 2025 •

edited

Loading