katze_942/synapse
1
0
Fork 0
Code Issues Pull requests 8 Projects Releases Packages 1 Wiki Activity Actions

chore(deps): bump path-to-regexp, @nestjs/core and @nestjs/platform-express #5

Open
dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/multi-fe5ecdfe52 into main
pull from: dependabot/npm_and_yarn/multi-fe5ecdfe52
merge into: katze_942:main
Conversation 0 Commits 1 Files changed 2 +15 -15
dependabot[bot] commented 2026-05-14 07:33:26 +04:00 (Migrated from github.com)
Copy link

Bumps path-to-regexp to 8.4.2 and updates ancestor dependencies path-to-regexp, @nestjs/core and @nestjs/platform-express. These dependencies need to be updated together.

Updates path-to-regexp from 8.3.0 to 8.4.2

Release notes

Sourced from path-to-regexp's releases.

v8.4.2

Fixed

  • Error on trailing backslash (#434) 9a78879

Performance

  • Minimize array allocations (#437) 937c02d
  • Improve compile performance (#436) 57247e6
    • Should improve compilation performance by ~25%
  • Remove internal tokenization during parse (#435) 5844988
    • Should improve parse performance by ~20%

Bundle size to 1.93 kB, from 1.97 kB.

https://github.com/pillarjs/path-to-regexp/compare/v8.4.1...v8.4.2

v8.4.1

Fixed

  • Remove trie deduplication (#431) 6bc8e84
    • Using a trie required non-greedy matching, which regressed wildcards in non-ending mode by matching them up until the first match. For example:
      • /*foo with /a/b = /a
      • /*foo.htmlwith /a/b.html/c.html = /a/b.html
  • Allow backtrack handling to match itself (#427) 5bcd30b
    • When backtracking was introduced, it rejected matching things like /:"a"_:"b" against /foo__. This makes intuitive sense because the second parameter is not going to backtrack on _ anymore, but it's somewhat unexpected since there's no reason it shouldn't match the second _.

https://github.com/pillarjs/path-to-regexp/compare/v8.4.0...v8.4.1

v8.4.0

Important

Fixed

Changed

  • Dedupes regex prefixes (pillarjs/path-to-regexp#422)
    • This will result in shorter regular expressions for some cases using optional groups
  • Rejects large optional route combinations (pillarjs/path-to-regexp#424)
    • When using groups such as /users{/delete} it will restrict the number of generated combinations to < 256, equivalent to 8 top-level optional groups and unlikely to occur in a real world application, but avoids exploding the regex size for applications that accept user created routes
Commits

Updates @nestjs/core from 11.1.17 to 11.1.20

Release notes

Sourced from @​nestjs/core's releases.

v11.1.20 (2026-05-13)

Bug fixes

Enhancements

Dependencies

Committers: 13

v11.1.19 (2026-04-13)

Bug fixes

... (truncated)

Commits
  • 7caeb3f chore(release): publish v11.1.20 release
  • 2e290c6 fix(core): fix deeply nested transient providers resolution
  • f6a3c2f fix(docs): update some old links in docs
  • 958ff95 fix(core): Delay SSE response .end() until flush
  • 7c10646 Merge pull request #16753 from jkalberer/fix/sse-pipe-validation-error-status
  • 895fdf3 fix(core): Use strict null check for SSE message id
  • 6730995 chore(release): publish v11.1.19 release
  • 457630a fix(core): defer sse writehead until after lifecycle completes
  • 3c1cc5f chore(release): publish v11.1.18 release
  • 0f962c7 fix(core): sanitize sse message
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.17 to 11.1.20

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.20 (2026-05-13)

Bug fixes

Enhancements

Dependencies

Committers: 13

v11.1.19 (2026-04-13)

Bug fixes

... (truncated)

Commits
  • 7caeb3f chore(release): publish v11.1.20 release
  • f6a3c2f fix(docs): update some old links in docs
  • 5e33ecf feat: add MulterOptions and MulterField interfaces for express platform confi...
  • 6730995 chore(release): publish v11.1.19 release
  • 3c1cc5f chore(release): publish v11.1.18 release
  • 0ca5440 Merge pull request #16627 from ankitbelal/refactor/centralize-headers-and-par...
  • 25d4fde fix(deps): update dependency path-to-regexp to v8.4.2
  • 5c0b11e fix(deps): update dependency path-to-regexp to v8.4.1
  • d0a9dc9 fix(deps): update dependency path-to-regexp to v8.4.0
  • 1a14884 refactor(core): centralize headers for streamable file responses
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 8.4.2 and updates ancestor dependencies [path-to-regexp](https://github.com/pillarjs/path-to-regexp), [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) and [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express). These dependencies need to be updated together. Updates `path-to-regexp` from 8.3.0 to 8.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pillarjs/path-to-regexp/releases">path-to-regexp's releases</a>.</em></p> <blockquote> <h2>v8.4.2</h2> <p><strong>Fixed</strong></p> <ul> <li>Error on trailing backslash (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/434">#434</a>) 9a78879</li> </ul> <p><strong>Performance</strong></p> <ul> <li>Minimize array allocations (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/437">#437</a>) 937c02d</li> <li>Improve compile performance (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/436">#436</a>) 57247e6 <ul> <li>Should improve compilation performance by ~25%</li> </ul> </li> <li>Remove internal tokenization during parse (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/435">#435</a>) 5844988 <ul> <li>Should improve parse performance by ~20%</li> </ul> </li> </ul> <p><strong>Bundle size</strong> to 1.93 kB, from 1.97 kB.</p> <hr /> <p><a href="https://github.com/pillarjs/path-to-regexp/compare/v8.4.1...v8.4.2">https://github.com/pillarjs/path-to-regexp/compare/v8.4.1...v8.4.2</a></p> <h2>v8.4.1</h2> <p><strong>Fixed</strong></p> <ul> <li>Remove trie deduplication (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/431">#431</a>) 6bc8e84 <ul> <li>Using a trie required non-greedy matching, which regressed wildcards in non-ending mode by matching them up until the first match. For example: <ul> <li><code>/*foo</code> with <code>/a/b</code> = <code>/a</code></li> <li><code>/*foo.html</code>with <code>/a/b.html/c.html</code> = <code>/a/b.html</code></li> </ul> </li> </ul> </li> <li>Allow backtrack handling to match itself (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/427">#427</a>) 5bcd30b <ul> <li>When backtracking was introduced, it rejected matching things like <code>/:&quot;a&quot;_:&quot;b&quot;</code> against <code>/foo__</code>. This makes intuitive sense because the second parameter is not going to backtrack on <code>_</code> anymore, but it's somewhat unexpected since there's no reason it shouldn't match the second <code>_</code>.</li> </ul> </li> </ul> <hr /> <p><a href="https://github.com/pillarjs/path-to-regexp/compare/v8.4.0...v8.4.1">https://github.com/pillarjs/path-to-regexp/compare/v8.4.0...v8.4.1</a></p> <h2>v8.4.0</h2> <p><strong>Important</strong></p> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-4926">CVE-2026-4926</a> (<a href="https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-j3q9-mxjg-w52f">GHSA-j3q9-mxjg-w52f</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2026-4923">CVE-2026-4923</a> (<a href="https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-27v5-c462-wpq7">GHSA-27v5-c462-wpq7</a>)</li> </ul> <p><strong>Fixed</strong></p> <ul> <li>Restricts wildcard backtracking when using more than 1 in a path (<a href="https://redirect.github.com/pillarjs/path-to-regexp/pull/421">pillarjs/path-to-regexp#421</a>)</li> </ul> <p><strong>Changed</strong></p> <ul> <li>Dedupes regex prefixes (<a href="https://redirect.github.com/pillarjs/path-to-regexp/pull/422">pillarjs/path-to-regexp#422</a>) <ul> <li>This will result in shorter regular expressions for some cases using optional groups</li> </ul> </li> <li>Rejects large optional route combinations (<a href="https://redirect.github.com/pillarjs/path-to-regexp/pull/424">pillarjs/path-to-regexp#424</a>) <ul> <li>When using groups such as <code>/users{/delete}</code> it will restrict the number of generated combinations to &lt; 256, equivalent to 8 top-level optional groups and unlikely to occur in a real world application, but avoids exploding the regex size for applications that accept user created routes</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/cbf30259e6d34d6135f9e7dbaa3371e7188f9936"><code>cbf3025</code></a> 8.4.2</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/937c02df571aef02832610100859efab21995320"><code>937c02d</code></a> Minimize array allocations (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/437">#437</a>)</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/57247e63fd061aa17b9f75c87712c680b223ee04"><code>57247e6</code></a> Improve compile performance (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/436">#436</a>)</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/58449883539022c9ac36ea3e9abb0fc7b9d84223"><code>5844988</code></a> Remove internal tokenization during parse (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/435">#435</a>)</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/9a788793e7eeb0ccf9c53c1cb54d297b5badfcc3"><code>9a78879</code></a> Error on trailing backslash (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/434">#434</a>)</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/7f058760ae0867fdd75e5ed07d7096f782c1f752"><code>7f05876</code></a> 8.4.1</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/6bc8e84677caa52de6db7b2b17a6729ec155b070"><code>6bc8e84</code></a> Remove trie deduplication (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/431">#431</a>)</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/5bcd30b790fecfd4798521af28a57214996c4139"><code>5bcd30b</code></a> Allow backtrack handling to match itself (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/427">#427</a>)</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/9f9c6c501f6d015db3df224d2479475d59cac0a5"><code>9f9c6c5</code></a> Add parsing to benchmarks (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/418">#418</a>)</li> <li><a href="https://github.com/pillarjs/path-to-regexp/commit/9fd31e0cde4f35b5f15f1676eabe3484618038ad"><code>9fd31e0</code></a> Add <code>trailing: false</code> tests (<a href="https://redirect.github.com/pillarjs/path-to-regexp/issues/428">#428</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pillarjs/path-to-regexp/compare/v8.3.0...v8.4.2">compare view</a></li> </ul> </details> <br /> Updates `@nestjs/core` from 11.1.17 to 11.1.20 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nestjs/nest/releases">@​nestjs/core's releases</a>.</em></p> <blockquote> <h2>v11.1.20 (2026-05-13)</h2> <h4>Bug fixes</h4> <ul> <li><code>core</code>, <code>testing</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16939">#16939</a> fix(core): fix deeply nested transient providers resolution (<a href="https://github.com/kamilmysliwiec"><code>@​kamilmysliwiec</code></a>)</li> </ul> </li> <li><code>core</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16861">#16861</a> fix(core): fix <a href="https://github.com/Sse"><code>@​Sse</code></a> losing events on complete (<a href="https://github.com/MatthiasBrehmer"><code>@​MatthiasBrehmer</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16753">#16753</a> fix(core): defer sse writehead until after lifecycle completes (<a href="https://github.com/jkalberer"><code>@​jkalberer</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16782">#16782</a> fix(core): use strict null check for SSE message id (<a href="https://github.com/burhanharoon"><code>@​burhanharoon</code></a>)</li> </ul> </li> <li><code>microservices</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16850">#16850</a> fix(microservices): ServerRMQ crashes at boot when <a href="https://github.com/MessagePattern"><code>@​MessagePattern</code></a>(undefined) is combined with wildcards: true (<a href="https://github.com/lavieennoir"><code>@​lavieennoir</code></a>)</li> </ul> </li> <li><code>common</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16845">#16845</a> fix(common): accept zero timestamp in parse date pipe (<a href="https://github.com/Mysh3ll"><code>@​Mysh3ll</code></a>)</li> </ul> </li> <li><code>platform-socket.io</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16742">#16742</a> fix(socket.io): Deduplicate disconnect listener in bindMessageHandlers (<a href="https://github.com/fru1tworld"><code>@​fru1tworld</code></a>)</li> </ul> </li> </ul> <h4>Enhancements</h4> <ul> <li><code>microservices</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16676">#16676</a> feat(microservices): add return buffers option for binary data (<a href="https://github.com/Forceres"><code>@​Forceres</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16826">#16826</a> feat(microservices): handle rmq blocked/unblocked connection events (<a href="https://github.com/thisalihassan"><code>@​thisalihassan</code></a>)</li> </ul> </li> <li><code>common</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16902">#16902</a> fix(common): filetype validator buffer message (<a href="https://github.com/QusaiAlbonni"><code>@​QusaiAlbonni</code></a>)</li> </ul> </li> <li><code>platform-express</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16844">#16844</a> feat(platform-express): add defParamCharset to MulterOptions (<a href="https://github.com/starnayuta"><code>@​starnayuta</code></a>)</li> </ul> </li> </ul> <h4>Dependencies</h4> <ul> <li><code>platform-ws</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16941">#16941</a> chore(deps): bump ws from 8.20.0 to 8.20.1 (<a href="https://github.com/apps/dependabot"><code>@​dependabot[bot]</code></a>)</li> </ul> </li> </ul> <h4>Committers: 13</h4> <ul> <li>Ali Hassan (<a href="https://github.com/thisalihassan"><code>@​thisalihassan</code></a>)</li> <li>Burhan Haroon⚡ (<a href="https://github.com/burhanharoon"><code>@​burhanharoon</code></a>)</li> <li>Dmytro Khyzhniak (<a href="https://github.com/lavieennoir"><code>@​lavieennoir</code></a>)</li> <li>Harsh Rathod (<a href="https://github.com/harshrathod50"><code>@​harshrathod50</code></a>)</li> <li>IlyaCredo (<a href="https://github.com/Forceres"><code>@​Forceres</code></a>)</li> <li>Kamil Mysliwiec (<a href="https://github.com/kamilmysliwiec"><code>@​kamilmysliwiec</code></a>)</li> <li>Mysh3ll (<a href="https://github.com/Mysh3ll"><code>@​Mysh3ll</code></a>)</li> <li><a href="https://github.com/MatthiasBrehmer"><code>@​MatthiasBrehmer</code></a></li> <li><a href="https://github.com/QusaiAlbonni"><code>@​QusaiAlbonni</code></a></li> <li><a href="https://github.com/jkalberer"><code>@​jkalberer</code></a></li> <li><a href="https://github.com/pazaderey"><code>@​pazaderey</code></a></li> <li>fru1tworld (<a href="https://github.com/fru1tworld"><code>@​fru1tworld</code></a>)</li> <li>starnayuta (<a href="https://github.com/starnayuta"><code>@​starnayuta</code></a>)</li> </ul> <h2>v11.1.19 (2026-04-13)</h2> <h4>Bug fixes</h4> <ul> <li><code>microservices</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16762">#16762</a> fix(microservices): use backing field for consumer CRASH event listener (<a href="https://github.com/burhanharoon"><code>@​burhanharoon</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16764">#16764</a> fix(microservices): prevent stack overflow in jsonsocket.handledata() (<a href="https://github.com/kamilmysliwiec"><code>@​kamilmysliwiec</code></a>)</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nestjs/nest/commit/7caeb3fb70de81085c4c3e8502a2a0e62e4f8eda"><code>7caeb3f</code></a> chore(release): publish v11.1.20 release</li> <li><a href="https://github.com/nestjs/nest/commit/2e290c69c952e71a9fb8b6bef31e71d0307ce88b"><code>2e290c6</code></a> fix(core): fix deeply nested transient providers resolution</li> <li><a href="https://github.com/nestjs/nest/commit/f6a3c2f6701296df17068d5e9f5a849947e35633"><code>f6a3c2f</code></a> fix(docs): update some old links in docs</li> <li><a href="https://github.com/nestjs/nest/commit/958ff952c00bd5a25efa04ffaafac28721af7827"><code>958ff95</code></a> fix(core): Delay SSE response .end() until flush</li> <li><a href="https://github.com/nestjs/nest/commit/7c10646a0573ff0f30224ca3ca8b7803ed6c6bf6"><code>7c10646</code></a> Merge pull request <a href="https://github.com/nestjs/nest/tree/HEAD/packages/core/issues/16753">#16753</a> from jkalberer/fix/sse-pipe-validation-error-status</li> <li><a href="https://github.com/nestjs/nest/commit/895fdf321e7089f0dcf24d73ce929e2f346c5bb3"><code>895fdf3</code></a> fix(core): Use strict null check for SSE message id</li> <li><a href="https://github.com/nestjs/nest/commit/67309956821c0626c050fe6725c90645d2577e3d"><code>6730995</code></a> chore(release): publish v11.1.19 release</li> <li><a href="https://github.com/nestjs/nest/commit/457630a65f404ee9d96ed84f6083767ef4b8ef8c"><code>457630a</code></a> fix(core): defer sse writehead until after lifecycle completes</li> <li><a href="https://github.com/nestjs/nest/commit/3c1cc5f91e95fcec27c3694cd42a08a50e85cc5f"><code>3c1cc5f</code></a> chore(release): publish v11.1.18 release</li> <li><a href="https://github.com/nestjs/nest/commit/0f962c75a474b08fbc1bdf072b89eda14151c856"><code>0f962c7</code></a> fix(core): sanitize sse message</li> <li>Additional commits viewable in <a href="https://github.com/nestjs/nest/commits/v11.1.20/packages/core">compare view</a></li> </ul> </details> <br /> Updates `@nestjs/platform-express` from 11.1.17 to 11.1.20 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nestjs/nest/releases">@​nestjs/platform-express's releases</a>.</em></p> <blockquote> <h2>v11.1.20 (2026-05-13)</h2> <h4>Bug fixes</h4> <ul> <li><code>core</code>, <code>testing</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16939">#16939</a> fix(core): fix deeply nested transient providers resolution (<a href="https://github.com/kamilmysliwiec"><code>@​kamilmysliwiec</code></a>)</li> </ul> </li> <li><code>core</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16861">#16861</a> fix(core): fix <a href="https://github.com/Sse"><code>@​Sse</code></a> losing events on complete (<a href="https://github.com/MatthiasBrehmer"><code>@​MatthiasBrehmer</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16753">#16753</a> fix(core): defer sse writehead until after lifecycle completes (<a href="https://github.com/jkalberer"><code>@​jkalberer</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16782">#16782</a> fix(core): use strict null check for SSE message id (<a href="https://github.com/burhanharoon"><code>@​burhanharoon</code></a>)</li> </ul> </li> <li><code>microservices</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16850">#16850</a> fix(microservices): ServerRMQ crashes at boot when <a href="https://github.com/MessagePattern"><code>@​MessagePattern</code></a>(undefined) is combined with wildcards: true (<a href="https://github.com/lavieennoir"><code>@​lavieennoir</code></a>)</li> </ul> </li> <li><code>common</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16845">#16845</a> fix(common): accept zero timestamp in parse date pipe (<a href="https://github.com/Mysh3ll"><code>@​Mysh3ll</code></a>)</li> </ul> </li> <li><code>platform-socket.io</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16742">#16742</a> fix(socket.io): Deduplicate disconnect listener in bindMessageHandlers (<a href="https://github.com/fru1tworld"><code>@​fru1tworld</code></a>)</li> </ul> </li> </ul> <h4>Enhancements</h4> <ul> <li><code>microservices</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16676">#16676</a> feat(microservices): add return buffers option for binary data (<a href="https://github.com/Forceres"><code>@​Forceres</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16826">#16826</a> feat(microservices): handle rmq blocked/unblocked connection events (<a href="https://github.com/thisalihassan"><code>@​thisalihassan</code></a>)</li> </ul> </li> <li><code>common</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16902">#16902</a> fix(common): filetype validator buffer message (<a href="https://github.com/QusaiAlbonni"><code>@​QusaiAlbonni</code></a>)</li> </ul> </li> <li><code>platform-express</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16844">#16844</a> feat(platform-express): add defParamCharset to MulterOptions (<a href="https://github.com/starnayuta"><code>@​starnayuta</code></a>)</li> </ul> </li> </ul> <h4>Dependencies</h4> <ul> <li><code>platform-ws</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16941">#16941</a> chore(deps): bump ws from 8.20.0 to 8.20.1 (<a href="https://github.com/apps/dependabot"><code>@​dependabot[bot]</code></a>)</li> </ul> </li> </ul> <h4>Committers: 13</h4> <ul> <li>Ali Hassan (<a href="https://github.com/thisalihassan"><code>@​thisalihassan</code></a>)</li> <li>Burhan Haroon⚡ (<a href="https://github.com/burhanharoon"><code>@​burhanharoon</code></a>)</li> <li>Dmytro Khyzhniak (<a href="https://github.com/lavieennoir"><code>@​lavieennoir</code></a>)</li> <li>Harsh Rathod (<a href="https://github.com/harshrathod50"><code>@​harshrathod50</code></a>)</li> <li>IlyaCredo (<a href="https://github.com/Forceres"><code>@​Forceres</code></a>)</li> <li>Kamil Mysliwiec (<a href="https://github.com/kamilmysliwiec"><code>@​kamilmysliwiec</code></a>)</li> <li>Mysh3ll (<a href="https://github.com/Mysh3ll"><code>@​Mysh3ll</code></a>)</li> <li><a href="https://github.com/MatthiasBrehmer"><code>@​MatthiasBrehmer</code></a></li> <li><a href="https://github.com/QusaiAlbonni"><code>@​QusaiAlbonni</code></a></li> <li><a href="https://github.com/jkalberer"><code>@​jkalberer</code></a></li> <li><a href="https://github.com/pazaderey"><code>@​pazaderey</code></a></li> <li>fru1tworld (<a href="https://github.com/fru1tworld"><code>@​fru1tworld</code></a>)</li> <li>starnayuta (<a href="https://github.com/starnayuta"><code>@​starnayuta</code></a>)</li> </ul> <h2>v11.1.19 (2026-04-13)</h2> <h4>Bug fixes</h4> <ul> <li><code>microservices</code> <ul> <li><a href="https://redirect.github.com/nestjs/nest/pull/16762">#16762</a> fix(microservices): use backing field for consumer CRASH event listener (<a href="https://github.com/burhanharoon"><code>@​burhanharoon</code></a>)</li> <li><a href="https://redirect.github.com/nestjs/nest/pull/16764">#16764</a> fix(microservices): prevent stack overflow in jsonsocket.handledata() (<a href="https://github.com/kamilmysliwiec"><code>@​kamilmysliwiec</code></a>)</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nestjs/nest/commit/7caeb3fb70de81085c4c3e8502a2a0e62e4f8eda"><code>7caeb3f</code></a> chore(release): publish v11.1.20 release</li> <li><a href="https://github.com/nestjs/nest/commit/f6a3c2f6701296df17068d5e9f5a849947e35633"><code>f6a3c2f</code></a> fix(docs): update some old links in docs</li> <li><a href="https://github.com/nestjs/nest/commit/5e33ecfad88db4d9af659f38de56cd55c5c8ed10"><code>5e33ecf</code></a> feat: add MulterOptions and MulterField interfaces for express platform confi...</li> <li><a href="https://github.com/nestjs/nest/commit/67309956821c0626c050fe6725c90645d2577e3d"><code>6730995</code></a> chore(release): publish v11.1.19 release</li> <li><a href="https://github.com/nestjs/nest/commit/3c1cc5f91e95fcec27c3694cd42a08a50e85cc5f"><code>3c1cc5f</code></a> chore(release): publish v11.1.18 release</li> <li><a href="https://github.com/nestjs/nest/commit/0ca5440044b2fd0c9090502fec91bab782a08f55"><code>0ca5440</code></a> Merge pull request <a href="https://github.com/nestjs/nest/tree/HEAD/packages/platform-express/issues/16627">#16627</a> from ankitbelal/refactor/centralize-headers-and-par...</li> <li><a href="https://github.com/nestjs/nest/commit/25d4fdef37ac20930cc66b1283267651631e26f8"><code>25d4fde</code></a> fix(deps): update dependency path-to-regexp to v8.4.2</li> <li><a href="https://github.com/nestjs/nest/commit/5c0b11e20c35c0a5692c16187519982091d57150"><code>5c0b11e</code></a> fix(deps): update dependency path-to-regexp to v8.4.1</li> <li><a href="https://github.com/nestjs/nest/commit/d0a9dc97acba4ae7b33d9a46d8941f4ad6b3b914"><code>d0a9dc9</code></a> fix(deps): update dependency path-to-regexp to v8.4.0</li> <li><a href="https://github.com/nestjs/nest/commit/1a148848c84d2b583abb8dc5f52b26c988721bd7"><code>1a14884</code></a> refactor(core): centralize headers for streamable file responses</li> <li>Additional commits viewable in <a href="https://github.com/nestjs/nest/commits/v11.1.20/packages/platform-express">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Katze-942/node/network/alerts). </details>
This pull request has changes conflicting with the target branch.
  • package-lock.json
  • package.json
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/npm_and_yarn/multi-fe5ecdfe52:dependabot/npm_and_yarn/multi-fe5ecdfe52
git switch dependabot/npm_and_yarn/multi-fe5ecdfe52

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff dependabot/npm_and_yarn/multi-fe5ecdfe52
git switch dependabot/npm_and_yarn/multi-fe5ecdfe52
git rebase main
git switch main
git merge --ff-only dependabot/npm_and_yarn/multi-fe5ecdfe52
git switch dependabot/npm_and_yarn/multi-fe5ecdfe52
git rebase main
git switch main
git merge --no-ff dependabot/npm_and_yarn/multi-fe5ecdfe52
git switch main
git merge --squash dependabot/npm_and_yarn/multi-fe5ecdfe52
git switch main
git merge --ff-only dependabot/npm_and_yarn/multi-fe5ecdfe52
git switch main
git merge dependabot/npm_and_yarn/multi-fe5ecdfe52
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something isn't working

  
dependencies
Pull requests that update a dependency file

  
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
javascript
Pull requests that update javascript code

  
question
Further information is requested

  
wontfix
This will not be worked on

No labels
bug
dependencies
documentation
duplicate
enhancement
good first issue
help wanted
invalid
javascript
question
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
katze_942/synapse!5
No description provided.