changeset-bot[bot]
commented
1 month ago ⚠️ No Changeset found
Latest commit: dcbd3f4a936b23d497804f3cccb4930aa15da9f5
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
This PR includes no changesets
When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver typesClick here to learn what changesets are, and how to add one.
Click here if you're a maintainer who wants to add a changeset to this PR
This PR contains the following updates:
8.4.7->9.0.5GitHub Vulnerability Alerts
CVE-2023-26108
Versions of the package @nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open.
Release Notes
nestjs/nest (@nestjs/core)
### [`v9.0.5`](https://togithub.com/nestjs/nest/releases/tag/v9.0.5) [Compare Source](https://togithub.com/nestjs/nest/compare/v9.0.4...v9.0.5) #### v9.0.5 (2022-07-20) ##### Bug fixes - `common`, `platform-express` - [#9819](https://togithub.com/nestjs/nest/pull/9819) fix: use pipeline over stream.pipe ([@jmcdo29](https://togithub.com/jmcdo29)) ##### Enhancements - `microservices` - [#9798](https://togithub.com/nestjs/nest/pull/9798) feat(microservices): add noAssert option for RMQ connection ([@frankmangone](https://togithub.com/frankmangone)) - [#9954](https://togithub.com/nestjs/nest/pull/9954) feat(microservices): add Kafka heartbeat callback to KafkaContext ([@kosh-b](https://togithub.com/kosh-b)) - `platform-express`, `platform-fastify` - [#9926](https://togithub.com/nestjs/nest/pull/9926) fix(express,fastify): raw body for urlencoded requests ([@tolgap](https://togithub.com/tolgap)) ##### Dependencies - Other - [#9959](https://togithub.com/nestjs/nest/pull/9959) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/30-event-emitter ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9960](https://togithub.com/nestjs/nest/pull/9960) chore(deps): bump terser from 5.14.1 to 5.14.2 in /sample/32-graphql-federation-schema-first/users-application ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9961](https://togithub.com/nestjs/nest/pull/9961) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/31-graphql-federation-code-first/gateway ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9962](https://togithub.com/nestjs/nest/pull/9962) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/31-graphql-federation-code-first/users-application ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9963](https://togithub.com/nestjs/nest/pull/9963) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/32-graphql-federation-schema-first/posts-application ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9964](https://togithub.com/nestjs/nest/pull/9964) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/32-graphql-federation-schema-first/gateway ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9965](https://togithub.com/nestjs/nest/pull/9965) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/29-file-upload ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9966](https://togithub.com/nestjs/nest/pull/9966) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/28-sse ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9967](https://togithub.com/nestjs/nest/pull/9967) chore(deps): bump terser from 5.10.0 to 5.14.2 in /sample/31-graphql-federation-code-first/posts-application ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9951](https://togithub.com/nestjs/nest/pull/9951) chore(deps-dev): bump mongoose from 6.4.4 to 6.4.5 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9952](https://togithub.com/nestjs/nest/pull/9952) chore(deps-dev): bump concurrently from 7.2.2 to 7.3.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - `platform-fastify` - [#9950](https://togithub.com/nestjs/nest/pull/9950) chore(deps): bump light-my-request from 5.1.0 to 5.2.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) ##### Committers: 4 - Franco Mangone ([@frankmangone](https://togithub.com/frankmangone)) - Jay McDoniel ([@jmcdo29](https://togithub.com/jmcdo29)) - Tolga Paksoy ([@tolgap](https://togithub.com/tolgap)) - [@kosh-b](https://togithub.com/kosh-b) ### [`v9.0.4`](https://togithub.com/nestjs/nest/compare/v9.0.3...v9.0.4) [Compare Source](https://togithub.com/nestjs/nest/compare/v9.0.3...v9.0.4) ### [`v9.0.3`](https://togithub.com/nestjs/nest/compare/v9.0.2...v9.0.3) [Compare Source](https://togithub.com/nestjs/nest/compare/v9.0.2...v9.0.3) ### [`v9.0.2`](https://togithub.com/nestjs/nest/releases/tag/v9.0.2) [Compare Source](https://togithub.com/nestjs/nest/compare/v9.0.1...v9.0.2) #### v9.0.2 ##### Bug fixes - `common` - [#9904](https://togithub.com/nestjs/nest/pull/9904) fix(common): Fix CacheModule registerAsync ([@tugascript](https://togithub.com/tugascript)) ##### Enhancements - `core` - [#9902](https://togithub.com/nestjs/nest/pull/9902) refactor(core): replace our own 1-level flatten by the native one ([@micalevisk](https://togithub.com/micalevisk)) ##### Dependencies - [#9906](https://togithub.com/nestjs/nest/pull/9906) chore(deps-dev): bump mongoose from 6.4.3 to 6.4.4 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9908](https://togithub.com/nestjs/nest/pull/9908) chore(deps-dev): bump cache-manager from 4.0.1 to 4.1.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9910](https://togithub.com/nestjs/nest/pull/9910) chore(deps-dev): bump [@nestjs/graphql](https://togithub.com/nestjs/graphql) from 10.0.16 to 10.0.18 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9911](https://togithub.com/nestjs/nest/pull/9911) chore(deps-dev): bump core-js from 3.23.3 to 3.23.4 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) ##### Committers: 3 - Afonso Barracha ([@tugascript](https://togithub.com/tugascript)) - Antonio T. alias Tony ([@Tony133](https://togithub.com/Tony133)) - Micael Levi L. Cavalcante ([@micalevisk](https://togithub.com/micalevisk)) ### [`v9.0.1`](https://togithub.com/nestjs/nest/compare/v9.0.0...v9.0.1) [Compare Source](https://togithub.com/nestjs/nest/compare/v9.0.0...v9.0.1) ### [`v9.0.0`](https://togithub.com/nestjs/nest/releases/tag/v9.0.0) [Compare Source](https://togithub.com/nestjs/nest/compare/v8.4.7...v9.0.0) #### v9.0.0 (2022-07-08) ##### Article: https://trilon.io/blog/nestjs-9-is-now-available ##### Migration guide: https://docs.nestjs.com/migration-guide ##### Features - `common` - [#9718](https://togithub.com/nestjs/nest/pull/9718) Feature/4752 file validators pipe ([@thiagomini](https://togithub.com/thiagomini)) - [#9534](https://togithub.com/nestjs/nest/pull/9534) feat(core): add configurable module builder, module utils ([@kamilmysliwiec](https://togithub.com/kamilmysliwiec)) - `common`, `core` - [#9684](https://togithub.com/nestjs/nest/pull/9684) feat(core): read–eval–print loop feature ([@kamilmysliwiec](https://togithub.com/kamilmysliwiec)) - [#9697](https://togithub.com/nestjs/nest/pull/9697) feat(core): add durable providers feature ([@kamilmysliwiec](https://togithub.com/kamilmysliwiec)) ##### Bug fixes - `microservices` - [#9674](https://togithub.com/nestjs/nest/pull/9674) fix(microservices): Fixed typings for MessageHandler ([@dkonasov](https://togithub.com/dkonasov)) - [#9587](https://togithub.com/nestjs/nest/pull/9587) fix(microservices): revert grpc client interceptors (grpc-specific) ([@kamilmysliwiec](https://togithub.com/kamilmysliwiec)) ##### Enhancements - `common`, `core`, `platform-express`, `platform-fastify` - [#8802](https://togithub.com/nestjs/nest/pull/8802) fix: only send exception responses if header is not already sent ([@wSedlacek](https://togithub.com/wSedlacek)) - [#9591](https://togithub.com/nestjs/nest/pull/9591) feat(common,core): make `HttpServer#applyVersionFilter` mandatory ([@micalevisk](https://togithub.com/micalevisk)) - `common` - [#9705](https://togithub.com/nestjs/nest/pull/9705) feat(common): Add error chaining support to http exception ([@vinnymac](https://togithub.com/vinnymac)) - [#9383](https://togithub.com/nestjs/nest/pull/9383) feat(common): disallow usage of `inject` on class and value providers at type level ([@micalevisk](https://togithub.com/micalevisk)) - [#9023](https://togithub.com/nestjs/nest/pull/9023) fix: fix factory provider definition ([@ZanMinKian](https://togithub.com/ZanMinKian)) - [#8459](https://togithub.com/nestjs/nest/pull/8459) fix(common): ParseUUIDPipe - throw exceptions with exceptionFactory only ([@titivuk](https://togithub.com/titivuk)) - `microservices` - [#9681](https://togithub.com/nestjs/nest/pull/9681) fix(microservices): allow `postfixId` on `KafkaOptions` to be an empty string ([@micalevisk](https://togithub.com/micalevisk)) - [#8798](https://togithub.com/nestjs/nest/pull/8798) feat(microservices): migrate redis transporter to internally use ioredis package ([@kamilmysliwiec](https://togithub.com/kamilmysliwiec)) - [#9586](https://togithub.com/nestjs/nest/pull/9586) feat(microservices): add kafka retriable exception, auto-unwrap payloads ([@kamilmysliwiec](https://togithub.com/kamilmysliwiec)) - `core` - [#9720](https://togithub.com/nestjs/nest/pull/9720) fix(core): prevent renaming global providers and modules in the repl ([@micalevisk](https://togithub.com/micalevisk)) - [#9596](https://togithub.com/nestjs/nest/pull/9596) feat(core): throw an exception instead of logging due to module import misusage ([@micalevisk](https://togithub.com/micalevisk)) - `common`, `core`, `microservices` - [#9604](https://togithub.com/nestjs/nest/pull/9604) refactor(common,core,microservices): drop all deprecated methods ([@micalevisk](https://togithub.com/micalevisk)) - `core`, `websockets` - [#9491](https://togithub.com/nestjs/nest/pull/9491) feat(core,websockets): use rxjs to check if values are observables ([@micalevisk](https://togithub.com/micalevisk)) ##### Dependencies - Other - [#9885](https://togithub.com/nestjs/nest/pull/9885) chore(deps-dev): bump [@fastify/static](https://togithub.com/fastify/static) from 5.0.0 to 6.4.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9883](https://togithub.com/nestjs/nest/pull/9883) chore(deps-dev): bump ioredis from 5.0.4 to 5.1.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9884](https://togithub.com/nestjs/nest/pull/9884) chore(deps-dev): bump nodemon from 2.0.18 to 2.0.19 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9886](https://togithub.com/nestjs/nest/pull/9886) chore(deps-dev): bump supertest from 6.2.3 to 6.2.4 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9888](https://togithub.com/nestjs/nest/pull/9888) chore(deps-dev): bump [@types/cache-manager](https://togithub.com/types/cache-manager) from 4.0.0 to 4.0.1 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9889](https://togithub.com/nestjs/nest/pull/9889) chore(deps): bump cli-color from 2.0.2 to 2.0.3 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9890](https://togithub.com/nestjs/nest/pull/9890) chore(deps-dev): bump [@types/node](https://togithub.com/types/node) from 18.0.0 to 18.0.3 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9882](https://togithub.com/nestjs/nest/pull/9882) chore(deps-dev): bump [@fastify/multipart](https://togithub.com/fastify/multipart) from 6.0.0 to 7.1.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9869](https://togithub.com/nestjs/nest/pull/9869) chore(deps): bump fast-json-stringify from 5.0.1 to 5.0.6 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9851](https://togithub.com/nestjs/nest/pull/9851) chore(deps-dev): bump kafkajs from 2.0.2 to 2.1.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9848](https://togithub.com/nestjs/nest/pull/9848) chore(deps-dev): bump graphql-tools from 8.2.13 to 8.3.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9837](https://togithub.com/nestjs/nest/pull/9837) chore(deps-dev): bump [@commitlint/config-angular](https://togithub.com/commitlint/config-angular) from 17.0.0 to 17.0.3 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9871](https://togithub.com/nestjs/nest/pull/9871) chore(deps-dev): bump redis from 3.1.2 to 4.2.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9870](https://togithub.com/nestjs/nest/pull/9870) chore(deps-dev): bump mongoose from 6.4.0 to 6.4.3 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9852](https://togithub.com/nestjs/nest/pull/9852) chore(deps-dev): bump [@types/sinon](https://togithub.com/types/sinon) from 10.0.11 to 10.0.12 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9766](https://togithub.com/nestjs/nest/pull/9766) chore(deps): bump middie from 6.1.0 to 7.1.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9876](https://togithub.com/nestjs/nest/pull/9876) chore(deps): bump moment from 2.29.2 to 2.29.4 in /sample/07-sequelize ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9875](https://togithub.com/nestjs/nest/pull/9875) chore(deps): bump moment from 2.29.2 to 2.29.4 in /sample/26-queues ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9877](https://togithub.com/nestjs/nest/pull/9877) chore(deps): bump moment from 2.29.2 to 2.29.4 in /sample/27-scheduling ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9878](https://togithub.com/nestjs/nest/pull/9878) chore(deps): bump moment from 2.29.2 to 2.29.4 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9838](https://togithub.com/nestjs/nest/pull/9838) chore(deps-dev): bump core-js from 3.23.2 to 3.23.3 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9839](https://togithub.com/nestjs/nest/pull/9839) chore(deps-dev): bump [@commitlint/cli](https://togithub.com/commitlint/cli) from 17.0.2 to 17.0.3 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9841](https://togithub.com/nestjs/nest/pull/9841) chore(deps-dev): bump lint-staged from 13.0.2 to 13.0.3 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9830](https://togithub.com/nestjs/nest/pull/9830) chore(deps-dev): bump nodemon from 2.0.16 to 2.0.18 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9828](https://togithub.com/nestjs/nest/pull/9828) chore(deps): bump fast-json-stringify from 4.2.0 to 5.0.1 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9827](https://togithub.com/nestjs/nest/pull/9827) chore(deps-dev): bump graphql-tools from 8.2.12 to 8.2.13 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9815](https://togithub.com/nestjs/nest/pull/9815) chore(deps-dev): bump core-js from 3.23.1 to 3.23.2 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9796](https://togithub.com/nestjs/nest/pull/9796) chore(deps-dev): bump prettier from 2.7.0 to 2.7.1 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9807](https://togithub.com/nestjs/nest/pull/9807) chore(deps-dev): bump mongoose from 6.3.8 to 6.4.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9808](https://togithub.com/nestjs/nest/pull/9808) chore(deps-dev): bump typescript from 4.7.3 to 4.7.4 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9791](https://togithub.com/nestjs/nest/pull/9791) chore(deps-dev): bump apollo-server-core from 3.8.2 to 3.9.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9790](https://togithub.com/nestjs/nest/pull/9790) chore(deps-dev): bump [@nestjs/apollo](https://togithub.com/nestjs/apollo) from 10.0.14 to 10.0.16 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9787](https://togithub.com/nestjs/nest/pull/9787) chore(deps-dev): bump apollo-server-express from 3.8.2 to 3.9.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9788](https://togithub.com/nestjs/nest/pull/9788) chore(deps-dev): bump [@types/node](https://togithub.com/types/node) from 17.0.43 to 18.0.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9792](https://togithub.com/nestjs/nest/pull/9792) chore(deps-dev): bump [@nestjs/graphql](https://togithub.com/nestjs/graphql) from 10.0.15 to 10.0.16 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9794](https://togithub.com/nestjs/nest/pull/9794) chore(deps-dev): bump lint-staged from 13.0.1 to 13.0.2 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9779](https://togithub.com/nestjs/nest/pull/9779) chore(deps-dev): bump concurrently from 7.2.1 to 7.2.2 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9780](https://togithub.com/nestjs/nest/pull/9780) chore(deps-dev): bump [@types/node](https://togithub.com/types/node) from 17.0.42 to 17.0.43 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9781](https://togithub.com/nestjs/nest/pull/9781) chore(deps-dev): bump core-js from 3.23.0 to 3.23.1 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9782](https://togithub.com/nestjs/nest/pull/9782) chore(deps-dev): bump [@nestjs/mongoose](https://togithub.com/nestjs/mongoose) from 9.1.0 to 9.1.1 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9772](https://togithub.com/nestjs/nest/pull/9772) chore(deps-dev): bump prettier from 2.6.2 to 2.7.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9734](https://togithub.com/nestjs/nest/pull/9734) chore(deps-dev): bump ts-node from 10.8.0 to 10.8.1 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9761](https://togithub.com/nestjs/nest/pull/9761) chore(deps): bump fast-json-stringify from 4.1.0 to 4.2.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9771](https://togithub.com/nestjs/nest/pull/9771) chore(deps-dev): bump core-js from 3.22.8 to 3.23.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9773](https://togithub.com/nestjs/nest/pull/9773) chore(deps-dev): bump [@types/cache-manager](https://togithub.com/types/cache-manager) from 3.4.3 to 4.0.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - [#9522](https://togithub.com/nestjs/nest/pull/9522) chore(deps-dev): bump mocha from 9.2.2 to 10.0.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - `platform-fastify` - [#9853](https://togithub.com/nestjs/nest/pull/9853) chore(deps): bump fastify from 3.29.0 to 4.2.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) - `microservices`, `testing` - [#9825](https://togithub.com/nestjs/nest/pull/9825) chore(deps): update dependency got to 11.8.5 \[security] ([@renovate\[bot\]](https://togithub.com/apps/renovate)) - `platform-ws` - [#9770](https://togithub.com/nestjs/nest/pull/9770) chore(deps): bump ws from 8.7.0 to 8.8.0 ([@dependabot\[bot\]](https://togithub.com/apps/dependabot)) ##### Committers: 13 - Dylan Lundy ([@diesal11](https://togithub.com/diesal11)) - Kamil Mysliwiec ([@kamilmysliwiec](https://togithub.com/kamilmysliwiec)) - Kanstantsin Tatarchuk ([@titivuk](https://togithub.com/titivuk)) - Marcin Wojciechowski ([@Wojciechowski-Marcin](https://togithub.com/Wojciechowski-Marcin)) - Micael Levi L. Cavalcante ([@micalevisk](https://togithub.com/micalevisk)) - Thiago Valentim ([@thiagomini](https://togithub.com/thiagomini)) - Vincent Taverna ([@vinnymac](https://togithub.com/vinnymac)) - William Sedlacek ([@wSedlacek](https://togithub.com/wSedlacek)) - [@chunghha](https://togithub.com/chunghha) - [@dkonasov](https://togithub.com/dkonasov) - [@yevgeniypak](https://togithub.com/yevgeniypak) - 曾明健 ([@ZanMinKian](https://togithub.com/ZanMinKian)) - 정우병 ([@woobottle](https://togithub.com/woobottle))Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.