Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore(deps): bump the minor-and-patch group across 1 directory with 25 updates

Open
Number: #4
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 4
Created: September 16, 2026 at 02:27 AM UTC
(about 2 hours ago)
Updated: September 16, 2026 at 02:27 AM UTC
(about 2 hours ago)
Labels:
dependencies javascript
Description:

Bumps the minor-and-patch group with 24 updates in the / directory:

Package From To
vitest 2.0.5 2.1.9
@nestjs/common 10.4.1 10.4.22
@nestjs/core 10.4.1 10.4.22
@nestjs/platform-express 10.4.1 10.4.22
@nestjs/throttler 6.2.1 6.5.0
class-validator 0.14.1 0.15.1
cookie-parser 1.4.6 1.4.7
@types/cookie-parser 1.4.7 1.4.10
helmet 7.1.0 7.2.0
nodemailer 6.9.14 6.10.1
@nestjs/cli 10.4.4 10.4.9
@nestjs/schematics 10.1.4 10.2.3
@nestjs/testing 10.4.1 10.4.22
supertest 7.0.0 7.2.2
@types/supertest 6.0.2 7.2.1
@tanstack/react-query 5.51.23 5.102.8
echarts 5.5.1 5.6.0
echarts-for-react 3.0.2 3.0.6
zustand 4.5.5 4.5.7
@testing-library/jest-dom 6.5.0 6.10.0
@testing-library/react 16.0.0 16.3.3
autoprefixer 10.5.6 10.6.0
jsdom 24.1.1 24.1.3
vite-plugin-pwa 0.20.5 0.21.2

Updates vitest from 2.0.5 to 2.1.9

Release notes

Sourced from vitest's releases.

v2.1.9

This release includes security patches for:

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @nestjs/common from 10.4.1 to 10.4.22

Release notes

Sourced from @​nestjs/common's releases.

v10.4.22

What's Changed

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.21...v10.4.22

v10.4.21

What's Changed

New Contributors

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.20...v10.4.21

v10.4.19 (2025-06-09)

Dependencies

v10.4.18 (2025-05-26)

Dependencies

  • platform-express
    • chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0

v10.4.16

What's Changed

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.15...v10.4.16

v10.4.15 (2024-12-09)

Dependencies

v10.4.13 (2024-12-03)

Bug fixes

  • common
    • #14256 chore(common): Add type declaration for RawBody decorator with pipes (@​sapenlei)

Dependencies

... (truncated)

Commits

Updates @nestjs/core from 10.4.1 to 10.4.22

Release notes

Sourced from @​nestjs/core's releases.

v10.4.22

What's Changed

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.21...v10.4.22

v10.4.21

What's Changed

New Contributors

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.20...v10.4.21

v10.4.19 (2025-06-09)

Dependencies

v10.4.18 (2025-05-26)

Dependencies

  • platform-express
    • chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0

v10.4.16

What's Changed

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.15...v10.4.16

v10.4.15 (2024-12-09)

Dependencies

v10.4.13 (2024-12-03)

Bug fixes

  • common
    • #14256 chore(common): Add type declaration for RawBody decorator with pipes (@​sapenlei)

Dependencies

... (truncated)

Commits

Updates @nestjs/platform-express from 10.4.1 to 10.4.22

Release notes

Sourced from @​nestjs/platform-express's releases.

v10.4.22

What's Changed

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.21...v10.4.22

v10.4.21

What's Changed

New Contributors

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.20...v10.4.21

v10.4.19 (2025-06-09)

Dependencies

v10.4.18 (2025-05-26)

Dependencies

  • platform-express
    • chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0

v10.4.16

What's Changed

Full Changelog: https://github.com/nestjs/nest/compare/v10.4.15...v10.4.16

v10.4.15 (2024-12-09)

Dependencies

v10.4.13 (2024-12-03)

Bug fixes

  • common
    • #14256 chore(common): Add type declaration for RawBody decorator with pipes (@​sapenlei)

Dependencies

... (truncated)

Commits

Updates @nestjs/throttler from 6.2.1 to 6.5.0

Release notes

Sourced from @​nestjs/throttler's releases.

v6.5.0

Minor Changes

  • 58964d6: Add a setHeaders option to control whether to add headers to the response or not

Minor Changes

  • 5cb4254: Update to allow for support for Nest version 11

v6.4.0

Minor Changes

  • 5cb4254: Update to allow for support for Nest version 11

v6.3.0

Minor Changes

  • fc93f3a: pass context to getTraker as a second arg
Changelog

Sourced from @​nestjs/throttler's changelog.

6.5.0

Minor Changes

  • 58964d6: Add a setHeaders option to control whether to add headers to the response or not

Minor Changes

  • 5cb4254: Update to allow for support for Nest version 11

6.3.0

Minor Changes

  • fc93f3a: pass context to getTraker as a second arg
Commits
  • 7b11a2e chore: version packages
  • 58964d6 feat: Add setHeader option
  • 4e970b2 fix: Remove interface change
  • 02fdf5b feat: Add setHeader option
  • f618a89 chore(deps): update dependency ts-jest to v29.4.6
  • a988bc4 chore(deps): update dependency @​types/express to v5.0.6
  • 521fbea chore(deps): update dependency prettier to v3.7.3
  • 473de77 chore(deps): update dependency prettier to v3.7.2
  • c7d69a7 chore(deps): update dependency graphql-tools to v9.0.25
  • a11466d chore(deps): update dependency @​nestjs/cli to v11.0.14
  • Additional commits viewable in compare view

Updates class-validator from 0.14.1 to 0.15.1

Release notes

Sourced from class-validator's releases.

v0.15.1

What's Changed

Full Changelog: https://github.com/typestack/class-validator/compare/v0.15.0...v0.15.1

v0.15.0

What's Changed

New Contributors

Full Changelog: https://github.com/typestack/class-validator/compare/v0.14.4...v0.15.0

v0.14.4

What's Changed

Full Changelog: https://github.com/typestack/class-validator/compare/v0.14.3...v0.14.4

v0.14.3

What's Changed

New Contributors

Full Changelog: https://github.com/typestack/class-validator/compare/v0.14.2...v0.14.3

v0.14.2

What's Changed

... (truncated)

Changelog

Sourced from class-validator's changelog.

0.15.1 (2026-02-26)

BREAKING CHANGES

  • Added options argument to IsIBAN validator (#2618), which breaks any existing usage of this decorator that pass an argument to the decorator, e.g. @IsIBAN({forbidUnknownValues: false})

Fixed

  • Updated lockfile to patch vulnerabilities (#2669)
  • Fixed a small grammatical error in the docs (#2596)

Added

  • Added validateIf option to all validators, providing a lot more flexibility in using conditional validation (#1579)
  • Added IsISO31661Numeric validator for country codes (#2657)
  • Added IsISO6391 validator for language codes (#2626)
  • Added more versions to IsUUID validator options. (#2647)

0.14.4 (2026-02-25)

  • Updated validator.js to 13.15.22 (#2649)

0.14.3 (2025-11-24)

0.14.2 (2025-05-02)

Fixed

  • Fixed an issue where forbidUnknownValues did not default to true when validatorOptions was undefined. (#2196 by @​cduff)
  • Fixed the ValidationMetadata.name property to work correctly with the @IsOptional decorator. (#2044 by @​Clashsoft)
  • Updated the Codecov configuration for continuous integration. (#2556 by @​haiweilian)
  • Fixed an issue where options were not passed correctly to the @IsBase64 decorator. (#2549 by @​aseyfpour)
  • Fixed argument handling for the isBase64 function. (#2574 by @​braaar)
Commits

Updates cookie-parser from 1.4.6 to 1.4.7

Release notes

Sourced from cookie-parser's releases.

1.4.7

What's Changed

New Contributors

Full Changelog: https://github.com/expressjs/cookie-parser/compare/1.4.6...1.4.7

Changelog

Sourced from cookie-parser's changelog.

1.4.7 / 2024-10-08

  • deps: cookie@0.7.2
    • Fix object assignment of hasOwnProperty
  • deps: cookie@0.7.1
    • Allow leading dot for domain
      • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
    • Add fast path for serialize without options, use obj.hasOwnProperty when parsing
  • deps: cookie@0.7.0
    • perf: parse cookies ~10% faster
    • fix: narrow the validation of cookies to match RFC6265
    • fix: add main to package.json for rspack
  • deps: cookie@0.6.0
    • Add partitioned option
  • deps: cookie@0.5.0
    • Add priority option
    • Fix expires option to reject invalid dates
    • pref: improve default decode speed
    • pref: remove slow string split in parse
  • deps: cookie@0.4.2
    • pref: read value only when assigning in parse
    • pref: remove unnecessary regexp in parse
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cookie-parser since your current version.


Updates @types/cookie-parser from 1.4.7 to 1.4.10

Commits

Updates helmet from 7.1.0 to 7.2.0

Changelog

Sourced from helmet's changelog.

7.2.0 - 2024-09-28

Changed

  • Content-Security-Policy middleware now warns if a directive should have quotes but does not, such as self instead of 'self'. This will be an error in future versions. See #454
Commits
  • 7e2b069 7.2.0
  • 7bea915 Update changelog for 7.2.0 release
  • 63ba434 Update Jest to latest version
  • 77559f8 Enable noUncheckedSideEffectImports TypeScript option
  • 0df600a Update tsx to latest version
  • 1e55dd9 Update TypeScript to latest version
  • a0c8a13 Update @​types/node to latest version
  • 4454633 Update Prettier to latest version
  • 1903fc0 Improve compression when publishing package
  • 70660df Update Rollup dependencies to latest versions
  • Additional commits viewable in compare view

Updates nodemailer from 6.9.14 to 6.10.1

Release notes

Sourced from nodemailer's releases.

v6.10.1

6.10.1 (2025-02-06)

Bug Fixes

v6.10.0

6.10.0 (2025-01-23)

Features

  • services: add Seznam email service configuration (#1695) (d1ae0a8)

Bug Fixes

  • proxy: Set error and timeout errors for proxied sockets (aa0c99c)

v6.9.16

6.9.16 (2024-10-28)

Bug Fixes

  • addressparser: Correctly detect if user local part is attached to domain part (f2096c5)

v6.9.15

6.9.15 (2024-08-08)

Bug Fixes

Changelog

Sourced from nodemailer's changelog.

6.10.1 (2025-02-06)

Bug Fixes

6.10.0 (2025-01-23)

Features

  • services: add Seznam email service configuration (#1695) (d1ae0a8)

Bug Fixes

  • proxy: Set error and timeout errors for proxied sockets (aa0c99c)

6.9.16 (2024-10-28)

Bug Fixes

  • addressparser: Correctly detect if user local part is attached to domain part (f2096c5)

6.9.15 (2024-08-08)

Bug Fixes

Commits

Updates @nestjs/cli from 10.4.4 to 10.4.9

Release notes

Sourced from @​nestjs/cli's releases.

Release 10.4.9

  • Merge pull request #2838 from yifanwww/fix/webpack-ignore-lazy-imports (3d0fe0b5)
  • fix: add missing class-transformer/storage in lazy import list (a1cc6cfe)
  • Merge pull request #2815 from nestjs/renovate/typescript-5.x (4af113ec)

Release 10.4.8

  • Merge pull request #2792 from nestjs/fix/type-check-error-2791 (5be20eb3)
  • Merge pull request #2797 from nestjs/renovate/tsconfig-paths-webpack-plugin-4.x (6d77fd30)
  • Merge pull request #2800 from caucik/webpack-fix-branch (9ec2d5e5)
  • fix: webpack default config - IgnorePlugin (83c5cfc8)
  • fix(deps): update dependency tsconfig-paths-webpack-plugin to v4.2.0 (ebdfb325)
  • chore(deps): update dependency @​swc/core to v1.9.2 (#2794) (ed9d8b86)
  • fix: show type check warning only when builder is not swc #2791 (2e23003b)
  • fix(deps): update dependency glob to v10.4.5 (7aba4817)

Release 10.4.7

  • Merge pull request #2786 from nestjs/revert-2642-renovate/glob-11.x (0ff0a01d)
  • Revert "fix(deps): update dependency glob to v11" (7af719ea)

Release 10.4.6

  • build: allow js, clean artificats in ci (7bc0b3ff)
  • chore(deps): update dependency ts-jest to v29.2.5 (41ce50bf)
  • fix(deps): update dependency typescript to v5.6.3 (067a1190)
  • Merge pull request #2784 from nestjs/renovate/node-22.x (f3bd8b00)
  • Merge pull request #2778 from nestjs/renovate/swc-monorepo (008ab68e)
  • Merge pull request #2780 from nestjs/renovate/webpack-5.x (d708ea95)
  • Merge pull request #2764 from nestjs/renovate/angular-cli-monorepo (d8ae02b5)
  • fix: add missing type argument (df91c495)
  • Merge branch 'addun-fix-issue-2653' (041a184b)
  • chore: resolve conflicts (486ac60e)
  • Merge pull request #2415 from yigitkurtcu/feat/generate-options-base-url (537dfa7e)
  • Merge pull request #2716 from nestjs/renovate/angular-cli-monorepo (ef0ff51d)
  • Merge pull request #2642 from nestjs/renovate/glob-11.x (c7e2e01d)
  • fix(deps): update angular-cli monorepo to v17.3.10 (960e65f8)
  • Merge pull request #2743 from nestjs/renovate/webpack-5.x (b750eadf)
  • Merge pull request #2754 from nestjs/renovate/nest-monorepo (603721e7)
  • fix(deps): update dependency @​nestjs/schematics to v10.2.2 (f062e99a)
  • fix: unification copy behavior between watched and not watched assets (3664ed06)
  • fix(deps): update dependency glob to v11 (fc6e7a16)
  • feat: basedir option added to configuration for generate command (877b6bd8)

Release 10.4.5

  • Merge pull request #2666 from nestjs/renovate/nest-monorepo (a734d81f)
  • Merge pull request #2712 from nestjs/renovate/npm-webpack-vulnerability (587e407e)
  • chore(deps): update dependency @​swc/core to v1.7.21 (4ccad5c5)
  • chore(deps): update commitlint monorepo to v19.4.1 (d3484bfd)
  • fix(deps): update dependency webpack to v5.94.0 [security] (78136826)
  • chore(deps): update dependency @​types/node to v20.16.2 (b9cdc65b)
  • chore(deps): update typescript-eslint monorepo to v8.3.0 (28913e79)
  • chore(deps): update dependency @​swc/core to v1.7.18 (fa03cba8)

... (truncated)

Commits
  • 81e15c3 chore(): release v10.4.9
  • 3d0fe0b Merge pull request #2838 from yifanwww/fix/webpack-ignore-lazy-imports
  • a1cc6cf fix: add missing class-transformer/storage in lazy import list
  • 4af113e Merge pull request #2815 from nestjs/renovate/typescript-5.x
  • 2e929c3 fix(deps): update dependency typescript to v5.7.2
  • 67503d3 Merge pull request #2830 from nestjs/renovate/webpack-5.x
  • 6110b8e chore(deps): update dependency @​swc/core to v1.10.1 (#2837)
  • ce66172 fix(deps): update dependency webpack to v5.97.1
  • bec6134 chore(deps): update dependency @​swc/core to v1.10.0 (#2832)
  • b10c00e chore(deps): update dependency prettier to v3.4.2 (#2831)
  • Additional commits viewable in compare view

Updates @nestjs/schematics from 10.1.4 to 10.2.3

Release notes

Sourced from @​nestjs/schematics's releases.

Release 10.2.3

  • Merge pull request #1919 from micalevisk/patch-1 (590ad1f)
  • Merge pull request #1915 from nestjs/renovate/angular-cli-monorepo (c2a0085)
  • Merge pull request #1918 from micalevisk/refactor-remove-deprecated-node-apis (2546cdb)
  • fix: downgrade eslint to v8 on application files (c716ed9)
  • refactor: drop deprecate nodejs utility api (e323a5a)
  • chore(deps): update babel monorepo to v7.26.0 (5eddd5a)
  • chore(deps): update dependency @​types/node to v20.17.1 (66013b1)
  • fix(deps): update angular-cli monorepo to v17.3.11 (5d47e13)
  • chore(deps): update dependency @​types/node to v20.17.0 (f614f17)
  • chore(deps): update dependency @​types/jest to v29.5.14 (ea8edec)
  • chore(deps): update babel monorepo to v7.25.9 (f50afcb)
  • chore(deps): update dependency @​types/node to v20.16.14 (39a550e)
  • chore(deps): update typescript-eslint monorepo to v8.11.0 (9271009)
  • Merge pull request #1904 from nestjs/renovate/release-it-17.x (fb410a8)
  • chore(deps): update dependency @​types/node to v20.16.13 (353afd8)
  • chore(deps): update dependency eslint to v9.13.0 (ba3b0d5)
  • chore(deps): update typescript-eslint monorepo to v8.10.0 (9d90c4d)
  • chore(deps): update dependency release-it to v17.10.0 (a880ab3)

Release 10.2.2

  • Merge pull request #1905 from nestjs/revert-1899-patch-1 (5fee5b0)
  • Revert "feat: enable forceConsistentCasingInFileNames for 'application' template" (8b4e2ec)

Release 10.2.1

  • chore: temporarily use web release (fcda2d4)
  • chore: regenerate package-lock (a97af97)
  • chore: regenerate package-lock (68ad379)
  • Merge branch 'master' of https://github.com/nestjs/schematics (14d1bba)
  • chore: update application schematic readme (ac76463)
  • chore(deps): update dependency @​types/node to v20.16.12 (427e447)

Release 10.2.0

  • Merge branch 'BrunnerLivio-feature/use-env-port' (8cb708c)
  • chore: resolve conflicts, update to nullish coalescing (1572899)
  • Merge branch 'master' of https://github.com/nestjs/schematics (7acea9b)
  • chore: update readme (e4b101c)
  • Merge pull request #1813 from nestjs/renovate/comment-json-4.x (cb3e503)
  • fix(deps): update dependency comment-json to v4.2.5 (ef65b9b)
  • Merge pull request #1862 from nestjs/renovate/angular-cli-monorepo (b5554ff)
  • Merge pull request #1899 from micalevisk/patch-1 (b1e1f8f)
  • Merge pull request #1902 from nestjs/renovate/release-it-17.x (3779fd3)
  • chore: update readme (5001925)
  • chore(deps): update dependency release-it to v17.10.0 (457d711)
  • chore(deps): update typescript-eslint monorepo to v8.9.0 (9ba353f)
  • chore(dep...

    Description has been truncated

Package Dependencies
Package:
vitest
Ecosystem:
npm
Version Change:
2.0.5 → 2.1.9
Update Type:
Minor
Package:
@tanstack/react-query
Ecosystem:
npm
Version Change:
5.51.23 → 5.102.8
Update Type:
Minor
Package:
supertest
Ecosystem:
npm
Version Change:
7.0.0 → 7.2.2
Update Type:
Minor
Package:
@nestjs/cli
Ecosystem:
npm
Version Change:
10.4.4 → 10.4.9
Update Type:
Patch
Package:
nodemailer
Ecosystem:
npm
Version Change:
6.9.14 → 6.10.1
Update Type:
Minor
Package:
zustand
Ecosystem:
npm
Version Change:
4.5.5 → 4.5.7
Update Type:
Patch
Package:
autoprefixer
Ecosystem:
npm
Version Change:
10.5.6 → 10.6.0
Update Type:
Minor
Package:
@nestjs/common
Ecosystem:
npm
Version Change:
10.4.1 → 10.4.22
Update Type:
Patch
Package:
@testing-library/react
Ecosystem:
npm
Version Change:
16.0.0 → 16.3.3
Update Type:
Minor
Package:
@testing-library/jest-dom
Ecosystem:
npm
Version Change:
6.5.0 → 6.10.0
Update Type:
Minor
Package:
helmet
Ecosystem:
npm
Version Change:
7.1.0 → 7.2.0
Update Type:
Minor
Package:
jsdom
Ecosystem:
npm
Version Change:
24.1.1 → 24.1.3
Update Type:
Patch
Package:
@nestjs/platform-express
Ecosystem:
npm
Version Change:
10.4.1 → 10.4.22
Update Type:
Patch
Package:
@nestjs/testing
Ecosystem:
npm
Version Change:
10.4.1 → 10.4.22
Update Type:
Patch
Package:
class-validator
Ecosystem:
npm
Version Change:
0.14.1 → 0.15.1
Update Type:
Minor
Package:
@nestjs/core
Ecosystem:
npm
Version Change:
10.4.1 → 10.4.22
Update Type:
Patch
Package:
echarts
Ecosystem:
npm
Version Change:
5.5.1 → 5.6.0
Update Type:
Minor
Package:
@nestjs/schematics
Ecosystem:
npm
Version Change:
10.1.4 → 10.2.3
Update Type:
Minor
Package:
cookie-parser
Ecosystem:
npm
Version Change:
1.4.6 → 1.4.7
Update Type:
Patch
Package:
vite-plugin-pwa
Ecosystem:
npm
Version Change:
0.20.5 → 0.21.2
Update Type:
Minor
Package:
@nestjs/throttler
Ecosystem:
npm
Version Change:
6.2.1 → 6.5.0
Update Type:
Minor
Package:
@types/supertest
Ecosystem:
npm
Version Change:
6.0.2 → 7.2.1
Update Type:
Major
Package:
@types/cookie-parser
Ecosystem:
npm
Version Change:
1.4.7 → 1.4.10
Update Type:
Patch
Package:
echarts-for-react
Ecosystem:
npm
Version Change:
3.0.2 → 3.0.6
Update Type:
Patch
Security Advisories
Vitest browser mode serves arbitrary files
GHSA-8gvc-j273-4wm5 CVE-2025-24963 MODERATE
### Summary `__screenshot-error` handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by [`browser.api.host: true`](...
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
GHSA-9crc-q9x8-hgqq CVE-2025-24964 CRITICAL
### Summary Arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking (CSWSH) attacks. ### Details When [`api` optio...
qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
GHSA-6rw7-vpxm-498p CVE-2025-15284 MODERATE
### Summary The `arrayLimit` option in qs did not enforce limits for bracket notation (`a[]=1&a[]=2`), only for indexed notation (`a[0]=1`). This is a consistency bug; `arrayLimit` should apply un...
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 16543839
UUID: 5469506387
Node ID: PR_kwDOUbYLKM8AAAABDs4ngA
Host: GitHub
Repository: pythonh06719/-