build(dependencies): bump the prod-dependencies-minor-and-patch group with 6 updates

Merged

Number: #123
Type: Pull Request
State: Merged

Author:

dependabot[bot]
Association: Contributor
Comments: 1

Created: August 01, 2025 at 01:51 AM UTC
(about 1 month ago)

Updated: August 01, 2025 at 01:53 AM UTC
(about 1 month ago)

Merged: August 01, 2025 at 01:53 AM UTC
(about 1 month ago)
by github-actions[bot]

Time to Close: 1 minute

Labels:
dependencies javascript

Description:

Bumps the prod-dependencies-minor-and-patch group with 6 updates:

Package	From	To
@nestjs/common	`11.1.3`	`11.1.5`
@nestjs/core	`11.1.3`	`11.1.5`
@nestjs/platform-express	`11.1.3`	`11.1.5`
morgan	`1.10.0`	`1.10.1`
@types/morgan	`1.9.9`	`1.9.10`
mysql2	`3.14.1`	`3.14.3`

Updates @nestjs/common from 11.1.3 to 11.1.5

Release notes

Sourced from @nestjs/common's releases.

v11.1.5 (2025-07-18)

Dependencies

platform-express

#15425 chore(deps): bump multer from 2.0.1 to 2.0.2 in /packages/platform-express (@dependabot[bot])

v11.1.4 (2025-07-16)

Bug fixes

platform-fastify

#15385 fix(testing): auto-init fastify adapter for middleware registration (@mag123c)

core, testing

#15405 fix(core): fix race condition in class dependency resolution (@hajekjiri)

core

#15333 fix(core): Make flattenRoutePath return a valid module (@gentunian)

microservices

#15305 fix(microservices): Revisit RMQ pattern matching with wildcards (@getlarge)

#15250 fix(constants): update RMQ_DEFAULT_QUEUE to an empty string (@EeeasyCode)

Enhancements

platform-fastify

#14789 feat(fastify): add decorator for custom schema (@piotrfrankowski)

common, core, microservices, platform-express, platform-fastify, websockets

#15386 feat: enhance introspection capabilities (@kamilmysliwiec)

core

#15374 feat: supporting fine async storage control (@Farenheith)

Dependencies

platform-ws

#15350 chore(deps): bump ws from 8.18.2 to 8.18.3 (@dependabot[bot])

platform-fastify

#15278 chore(deps): bump fastify from 5.3.3 to 5.4.0 (@dependabot[bot])

Committers: 11

Alexey Filippov (@SocketSomeone)

EFIcats (@ext4cats)

Edouard Maleix (@getlarge)

JaeHo Jang (@mag123c)

Jiri Hajek (@hajekjiri)

Kamil Mysliwiec (@kamilmysliwiec)

Khan / 이창민 (@EeeasyCode)

Peter F. (@piotrfrankowski)

Sebastian (@gentunian)

Thiago Oliveira Santos (@Farenheith)

jochong (@jochongs)

Commits

9bb0560 chore(@nestjs) publish v11.1.5 release
1f101ac chore(@nestjs) publish v11.1.4 release
2d63ebf chore: upgrade typescript
ed714ac Merge pull request #15386 from nestjs/feat/introspection-capabilities
adc7e15 feat: enhance introspection capabilities
a3621f8 docs: fix typo
See full diff in compare view

Updates @nestjs/core from 11.1.3 to 11.1.5

Release notes

Sourced from @nestjs/core's releases.

v11.1.5 (2025-07-18)

Dependencies

platform-express

#15425 chore(deps): bump multer from 2.0.1 to 2.0.2 in /packages/platform-express (@dependabot[bot])

v11.1.4 (2025-07-16)

Bug fixes

platform-fastify

#15385 fix(testing): auto-init fastify adapter for middleware registration (@mag123c)

core, testing

#15405 fix(core): fix race condition in class dependency resolution (@hajekjiri)

core

#15333 fix(core): Make flattenRoutePath return a valid module (@gentunian)

microservices

#15305 fix(microservices): Revisit RMQ pattern matching with wildcards (@getlarge)

#15250 fix(constants): update RMQ_DEFAULT_QUEUE to an empty string (@EeeasyCode)

Enhancements

platform-fastify

#14789 feat(fastify): add decorator for custom schema (@piotrfrankowski)

common, core, microservices, platform-express, platform-fastify, websockets

#15386 feat: enhance introspection capabilities (@kamilmysliwiec)

core

#15374 feat: supporting fine async storage control (@Farenheith)

Dependencies

platform-ws

#15350 chore(deps): bump ws from 8.18.2 to 8.18.3 (@dependabot[bot])

platform-fastify

#15278 chore(deps): bump fastify from 5.3.3 to 5.4.0 (@dependabot[bot])

Committers: 11

Alexey Filippov (@SocketSomeone)

EFIcats (@ext4cats)

Edouard Maleix (@getlarge)

JaeHo Jang (@mag123c)

Jiri Hajek (@hajekjiri)

Kamil Mysliwiec (@kamilmysliwiec)

Khan / 이창민 (@EeeasyCode)

Peter F. (@piotrfrankowski)

Sebastian (@gentunian)

Thiago Oliveira Santos (@Farenheith)

jochong (@jochongs)

Commits

9bb0560 chore(@nestjs) publish v11.1.5 release
1f101ac chore(@nestjs) publish v11.1.4 release
f704dcb Merge pull request #15405 from hajekjiri/bug/fix-race-condition-in-dependency...
a453b63 fix(core): fix race condition in class dependency resolution
565943c chore: revert to chai v4
3aa72ba Merge pull request #15333 from gentunian/fix-router-module-children-path-empty
ed714ac Merge pull request #15386 from nestjs/feat/introspection-capabilities
4d436f0 test: update outdated unit tests
adc7e15 feat: enhance introspection capabilities
2b9118a Merge pull request #15380 from SocketSomeone/patch-2
Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.3 to 11.1.5

Release notes

Sourced from @nestjs/platform-express's releases.

v11.1.5 (2025-07-18)

Dependencies

platform-express

#15425 chore(deps): bump multer from 2.0.1 to 2.0.2 in /packages/platform-express (@dependabot[bot])

v11.1.4 (2025-07-16)

Bug fixes

platform-fastify

#15385 fix(testing): auto-init fastify adapter for middleware registration (@mag123c)

core, testing

#15405 fix(core): fix race condition in class dependency resolution (@hajekjiri)

core

#15333 fix(core): Make flattenRoutePath return a valid module (@gentunian)

microservices

#15305 fix(microservices): Revisit RMQ pattern matching with wildcards (@getlarge)

#15250 fix(constants): update RMQ_DEFAULT_QUEUE to an empty string (@EeeasyCode)

Enhancements

platform-fastify

#14789 feat(fastify): add decorator for custom schema (@piotrfrankowski)

common, core, microservices, platform-express, platform-fastify, websockets

#15386 feat: enhance introspection capabilities (@kamilmysliwiec)

core

#15374 feat: supporting fine async storage control (@Farenheith)

Dependencies

platform-ws

#15350 chore(deps): bump ws from 8.18.2 to 8.18.3 (@dependabot[bot])

platform-fastify

#15278 chore(deps): bump fastify from 5.3.3 to 5.4.0 (@dependabot[bot])

Committers: 11

Alexey Filippov (@SocketSomeone)

EFIcats (@ext4cats)

Edouard Maleix (@getlarge)

JaeHo Jang (@mag123c)

Jiri Hajek (@hajekjiri)

Kamil Mysliwiec (@kamilmysliwiec)

Khan / 이창민 (@EeeasyCode)

Peter F. (@piotrfrankowski)

Sebastian (@gentunian)

Thiago Oliveira Santos (@Farenheith)

jochong (@jochongs)

Commits

9bb0560 chore(@nestjs) publish v11.1.5 release
da24918 chore(deps): bump multer in /packages/platform-express
1f101ac chore(@nestjs) publish v11.1.4 release
436e1de style: address linter warnings
4d436f0 test: update outdated unit tests
adc7e15 feat: enhance introspection capabilities
See full diff in compare view

Updates morgan from 1.10.0 to 1.10.1

Release notes

Sourced from morgan's releases.

1.10.1

What's Changed

renaming simple to sample in readme by @ryhinchey in expressjs/morgan#237

adding installation instructions to readme by @ryhinchey in expressjs/morgan#233

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/morgan#291

ci: replace travis with github actions by @inigomarquinez in expressjs/morgan#290

docs: add example output for log formats by @jonchurch in expressjs/morgan#299

ci: use ubuntu-latest by @bjohansebas in expressjs/morgan#301

ci: apply OSSF Scorecard security best practices by @UlisesGascon in expressjs/morgan#300

remove --bail by @jonchurch in expressjs/morgan#314

⬆️ bump on-headers by @ctcpip in expressjs/morgan#319

New Contributors

@inigomarquinez made their first contribution in expressjs/morgan#291

@jonchurch made their first contribution in expressjs/morgan#299

@bjohansebas made their first contribution in expressjs/morgan#301

@UlisesGascon made their first contribution in expressjs/morgan#300

@ctcpip made their first contribution in expressjs/morgan#319

Full Changelog: https://github.com/expressjs/morgan/compare/1.10.0...1.10.1

Changelog

Sourced from morgan's changelog.

1.10.1 / 2025-07-17

deps: on-headers@~1.1.0

Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

Commits

c1c7f10 🔖 1.10.1
eb896c2 ⬆️ bump on-headers
1c3eec6 remove --bail (#314)
b144728 ci: apply OSSF Scorecard security best practices (#300)
68c2d21 ci: use ubuntu-latest (#301)
8740a19 docs: add example output for log formats (#299)
efd6bff ci: migra to GitHub actions (#290)
3b89789 ci: add support for OSSF scorecard reporting (#291)
19a6aa5 docs: add installation section
b94f3ff docs: change simple to sample in example descriptions
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for morgan since your current version.

Updates @types/morgan from 1.9.9 to 1.9.10

Commits

See full diff in compare view

Updates mysql2 from 3.14.1 to 3.14.3

Release notes

Sourced from mysql2's releases.

v3.14.3

3.14.3 (2025-07-29)

Bug Fixes

resolve parser cache collision with dual typeCast connections (#3644) (ce2ad75)

v3.14.2

3.14.2 (2025-07-10)

Bug Fixes

pass columnType to readDateTimeString (#3700) (1ee48cc)

Changelog

Sourced from mysql2's changelog.

3.14.3 (2025-07-29)

Bug Fixes

resolve parser cache collision with dual typeCast connections (#3644) (ce2ad75)

3.14.2 (2025-07-10)

Bug Fixes

pass columnType to readDateTimeString (#3700) (1ee48cc)

Commits

3fc04d1 chore(master): release 3.14.3 (#3728)
672b072 build(deps-dev): bump @eslint/js from 9.31.0 to 9.32.0 (#3729)
ce2ad75 fix: resolve parser cache collision with dual typeCast connections (#3644)
4e395ea build(deps-dev): bump @eslint/markdown from 7.0.0 to 7.1.0 (#3727)
3599fd9 build(deps-dev): bump eslint-config-prettier from 10.1.5 to 10.1.8 (#3715)
d8ada23 build(deps-dev): bump @types/node from 24.0.14 to 24.1.0 in /website (#3724)
e1f6551 build(deps): bump @easyops-cn/docusaurus-search-local in /website (#3723)
3d028e5 build(deps-dev): bump @types/node from 24.0.15 to 24.1.0 (#3721)
549fb6c build(deps-dev): bump @typescript-eslint/eslint-plugin (#3719)
7653c11 build(deps-dev): bump @types/node from 24.0.14 to 24.0.15 (#3716)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Pull Request Statistics

Commits:
1

Files Changed:
2

Additions:
+40

Deletions:
-40

Package Dependencies

Package:
mysql2

Ecosystem:
npm

Version Change:
3.14.1 → 3.14.3

Update Type:
Patch

Package:
@nestjs/common

Ecosystem:
npm

Version Change:
11.1.3 → 11.1.5

Update Type:
Patch

Package:
@nestjs/platform-express

Ecosystem:
npm

Version Change:
11.1.3 → 11.1.5

Update Type:
Patch

Package:
@nestjs/core

Ecosystem:
npm

Version Change:
11.1.3 → 11.1.5

Update Type:
Patch

Package:
morgan

Ecosystem:
npm

Version Change:
1.10.0 → 1.10.1

Update Type:
Patch

Package:
@types/morgan

Ecosystem:
npm

Version Change:
1.9.9 → 1.9.10

Update Type:
Patch

Security Advisories

on-headers is vulnerable to http response header manipulation

GHSA-76c9-3jph-rj3q CVE-2025-7339 LOW

### Impact A bug in on-headers versions `< 1.1.0` may result in response headers being inadvertently modified when an array is passed to `response.writeHead()` ### Patches Users should upgrade t...

Actions

View on GitHub View Repository All Dependabot PRs

Technical Details

ID:	`4386484`
UUID:	`2711704310`
Node ID:	`PR_kwDOLtyvls6hoVL2`
Host:	GitHub
Repository:	adax10/nestjs-template-with-sql-and-i18n
Merge State:	Unknown