Skip to content

chore(deps): bump the npm-minor-patch group across 1 directory with 20 updates - #478

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-e7575a99e7
Closed

chore(deps): bump the npm-minor-patch group across 1 directory with 20 updates#478
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-e7575a99e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 20 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.1116.0 3.1145.0
@aws-sdk/s3-request-presigner 3.1116.0 3.1145.0
@nestjs/common 11.2.1 11.2.7
@nestjs/core 11.2.1 11.2.7
@nestjs/platform-express 11.2.1 11.2.7
graphql-ws 6.2.1 6.3.0
@graphql-codegen/cli 7.3.1 7.4.3
@nestjs/testing 11.2.1 11.2.7
eslint 10.9.1 10.11.0
globals 17.11.0 17.13.0
jest 30.4.2 30.5.2
knip 6.32.2 6.39.0
lint-staged 17.3.0 17.6.0
mysql2 3.24.2 3.24.5
prettier 3.9.6 3.9.9
supertest 7.2.2 7.3.0
testcontainers 12.1.0 12.2.0
ts-jest 29.4.12 29.4.14
typescript-eslint 8.67.0 8.71.0
yaml 2.9.0 2.9.1

Updates @aws-sdk/client-s3 from 3.1116.0 to 3.1145.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)
  • client-lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends (ed0d0540)
  • client-quicksight: This release adds HierarchyFilter support for Amazon QuickSight analysis and dashboard and 2 legged OAuth for databricks datasources. (a1730e33)
  • client-endusermessaging: AWS End User Messaging now supports Brand profiles and Notify code configurations. Brand profiles capture your sender details once to reuse across phone number registrations. Notify code configurations let you define your OTP policy and delivery settings to send passcodes in minutes. (3e5402c6)
  • client-transfer: AWS Transfer Family Workflows adds support for the structuredLogDestinations option, enabling customers to specify a custom Amazon CloudWatch Logs log group for managed workflow execution logs. (db1f8330)
  • client-health: Adds DescribeServiceLifecycle operation returning lifecycle information for AWS services, including end-of-support dates, version recommendations, and lifecycle events. (db93c016)
  • client-cloudfront: Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins. (e24eb7cf)
  • client-sagemaker: Release support for c8a.16xlarge and m8a.16xlarge instance types for SageMaker HyperPod (cfa700a6)
  • client-securityhub: Adds GetRemediationsV2 and ListExposuresByRemediationV2 APIs. This feature allows customers to see their highest priority remediations for their Exposure findings. Remediations target key changes customers can make to resources to drive finding resolution. (fe355577)
Bug Fixes
  • lib-transfer-manager: respect file read stream's byte range on upload (#8324) (449c2814)
  • ci: run format-check when a draft PR is marked ready for review (#8326) (d99dd58e)

For list of updated packages, view updated-packages.md in assets-3.1145.0.zip

v3.1144.0

3.1144.0(2026-09-30)

Documentation Changes
  • client-agent-registry: Minor doc update for the AWS Agent Registry Custom metadata SearchDiscoverableRegistryRecords API (fd88a846)
New Features
  • clients: update client endpoints as of 2026-09-30 (d13ef6af)
  • client-organizations: Add support for policy operations on the GUARDDUTY POLICY policy type. (407089b4)
  • client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdce)
  • client-observabilityadmin: Enablement for Bedrock PaymentManager logs via Observability Admin Telemetry Rule (1f287614)
  • client-datazone: Support for setting notebook run notification configurations (e15e2d5b)
  • client-guardduty: GuardDuty AWS Organizations policy integration. GetDetector and GetMemberDetectors now show whether a GuardDuty policy manages a feature. (10339365)
  • client-cloudwatch-logs: Amazon CloudWatch Logs now supports an optional roleArn parameter on PutDeliveryDestination for X-Ray trace delivery destinations, specifying the IAM role to assume when delivering traces. (735bb3d8)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1144.0 (2026-09-30)

Features

  • client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdc)

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/client-s3

3.1142.0 (2026-09-28)

Note: Version bump only for package @​aws-sdk/client-s3

3.1141.0 (2026-09-25)

Note: Version bump only for package @​aws-sdk/client-s3

3.1140.0 (2026-09-24)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits
  • 0199117 Publish v3.1145.0
  • ce26281 Publish v3.1144.0
  • 82bbbdc feat(client-s3): Amazon S3 adds a new optional S3 Inventory field, Intelligen...
  • 81afad0 Publish v3.1143.0
  • c935fdd Publish v3.1142.0
  • 5bc8d9a Publish v3.1141.0
  • 6050a38 Publish v3.1140.0
  • 03d54a8 Publish v3.1139.0
  • c68e50e Publish v3.1138.0
  • 9a10476 chore(codegen): sync for MetricsRecorder support and core error/retry fixes (...
  • Additional commits viewable in compare view

Updates @aws-sdk/s3-request-presigner from 3.1116.0 to 3.1145.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)
  • client-lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends (ed0d0540)
  • client-quicksight: This release adds HierarchyFilter support for Amazon QuickSight analysis and dashboard and 2 legged OAuth for databricks datasources. (a1730e33)
  • client-endusermessaging: AWS End User Messaging now supports Brand profiles and Notify code configurations. Brand profiles capture your sender details once to reuse across phone number registrations. Notify code configurations let you define your OTP policy and delivery settings to send passcodes in minutes. (3e5402c6)
  • client-transfer: AWS Transfer Family Workflows adds support for the structuredLogDestinations option, enabling customers to specify a custom Amazon CloudWatch Logs log group for managed workflow execution logs. (db1f8330)
  • client-health: Adds DescribeServiceLifecycle operation returning lifecycle information for AWS services, including end-of-support dates, version recommendations, and lifecycle events. (db93c016)
  • client-cloudfront: Added always-amz-auth as a supported signing behavior for Origin Access Control (OAC), enabling CloudFront to authenticate requests to Lambda-Web origins. (e24eb7cf)
  • client-sagemaker: Release support for c8a.16xlarge and m8a.16xlarge instance types for SageMaker HyperPod (cfa700a6)
  • client-securityhub: Adds GetRemediationsV2 and ListExposuresByRemediationV2 APIs. This feature allows customers to see their highest priority remediations for their Exposure findings. Remediations target key changes customers can make to resources to drive finding resolution. (fe355577)
Bug Fixes
  • lib-transfer-manager: respect file read stream's byte range on upload (#8324) (449c2814)
  • ci: run format-check when a draft PR is marked ready for review (#8326) (d99dd58e)

For list of updated packages, view updated-packages.md in assets-3.1145.0.zip

v3.1144.0

3.1144.0(2026-09-30)

Documentation Changes
  • client-agent-registry: Minor doc update for the AWS Agent Registry Custom metadata SearchDiscoverableRegistryRecords API (fd88a846)
New Features
  • clients: update client endpoints as of 2026-09-30 (d13ef6af)
  • client-organizations: Add support for policy operations on the GUARDDUTY POLICY policy type. (407089b4)
  • client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdce)
  • client-observabilityadmin: Enablement for Bedrock PaymentManager logs via Observability Admin Telemetry Rule (1f287614)
  • client-datazone: Support for setting notebook run notification configurations (e15e2d5b)
  • client-guardduty: GuardDuty AWS Organizations policy integration. GetDetector and GetMemberDetectors now show whether a GuardDuty policy manages a feature. (10339365)
  • client-cloudwatch-logs: Amazon CloudWatch Logs now supports an optional roleArn parameter on PutDeliveryDestination for X-Ray trace delivery destinations, specifying the IAM role to assume when delivering traces. (735bb3d8)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1144.0 (2026-09-30)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1142.0 (2026-09-28)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1141.0 (2026-09-25)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1140.0 (2026-09-24)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1139.0 (2026-09-23)

... (truncated)

Commits

Updates @nestjs/common from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/common's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

Commits

Updates @nestjs/core from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/core's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

Commits
  • c666d7f v11.2.7
  • c07cfb0 v11.2.6
  • e91618c chore(release): publish v11.2.5 release
  • d504622 chore(release): publish v11.2.4 release
  • 2b36ee5 chore(release): publish v11.2.3 release
  • e12b47b fix(core): circular durable providers issue #17562
  • 7e65752 chore(release): publish v11.2.2 release
  • 7ebaa88 chore: drop skip instrumentation - duplicated api
  • 4593b0a fix(core): preserve middleware arity #17554
  • 35a29cc fix(core): instrument middleware fallback issue
  • See full diff in compare view

Updates @nestjs/platform-express from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

Commits
  • c666d7f v11.2.7
  • c07cfb0 v11.2.6
  • fb8ecdb fix(deps): update dependency multer to v2.4.0 [security]
  • 58c3634 fix(express): map multer errors by code instead of message
  • e91618c chore(release): publish v11.2.5 release
  • d504622 chore(release): publish v11.2.4 release
  • 2b36ee5 chore(release): publish v11.2.3 release
  • 7e65752 chore(release): publish v11.2.2 release
  • See full diff in compare view

Updates graphql-ws from 6.2.1 to 6.3.0

Release notes

Sourced from graphql-ws's releases.

v6.3.0

Minor Changes

  • #691 b5f53cd Thanks @​niukanen1! - Add onPing and onPong server callbacks to ServerOptions, similar to onConnect and onDisconnect. The callbacks receive the connection Context as the first argument and the ping/pong payload as the second, allowing apps to log or react to subprotocol-level pings with access to connection state. The automatic pong reply is preserved when using the server-level onPing callback; the low-level websocket onPing listener still disables the automatic reply for full manual control.

Patch Changes

v6.2.2

Patch Changes

  • #690 1029314 Thanks @​Haasini-kudala! - Support crossws 0.4 by selecting the GraphQL WebSocket subprotocol during the upgrade handshake. Preserve automatic protocol negotiation in the legacy crossws 0.3 Node and uWebSockets adapters.

  • #686 536960e Thanks @​cpruijsen! - Fix the CrossWS adapter ignoring socket closes issued from server.opened

    makeHooks only registered the peer in the clients map after server.opened returned, while send/close no-op'd unless the peer was already in that map. A protocol-mismatch close (and any other close from inside opened) was therefore dropped, the WebSocket stayed open, and no ConnectionAck was ever sent because the message handler was never installed.

Changelog

Sourced from graphql-ws's changelog.

6.3.0

Minor Changes

  • #691 b5f53cd Thanks @​niukanen1! - Add onPing and onPong server callbacks to ServerOptions, similar to onConnect and onDisconnect. The callbacks receive the connection Context as the first argument and the ping/pong payload as the second, allowing apps to log or react to subprotocol-level pings with access to connection state. The automatic pong reply is preserved when using the server-level onPing callback; the low-level websocket onPing listener still disables the automatic reply for full manual control.

Patch Changes

6.2.2

Patch Changes

  • #690 1029314 Thanks @​Haasini-kudala! - Support crossws 0.4 by selecting the GraphQL WebSocket subprotocol during the upgrade handshake. Preserve automatic protocol negotiation in the legacy crossws 0.3 Node and uWebSockets adapters.

  • #686 536960e Thanks @​cpruijsen! - Fix the CrossWS adapter ignoring socket closes issued from server.opened

    makeHooks only registered the peer in the clients map after server.opened returned, while send/close no-op'd unless the peer was already in that map. A protocol-mismatch close (and any other close from inside opened) was therefore dropped, the WebSocket stayed open, and no ConnectionAck was ever sent because the message handler was never installed.

Commits
  • 53f321e Upcoming Release Changes (#694)
  • 93c8ebf fix: support Object prototype operation IDs (#695)
  • b5f53cd feat(server): add onPing and onPong callbacks to ServerOptions (#691)
  • c41433e Fix the client leaking memory per operation on long-living connections (#693)
  • 0c1765e Upcoming Release Changes (#687)
  • 1029314 fix(crossws): support version 0.4 protocol negotiation (#690)
  • 34cddf6 Update example to remove AsyncGenerator (#654) (#655)
  • 3649fab Update recipes.mdx abruptly closed example (#664)
  • 536960e fix(crossws): close the socket even if server.opened closes immediately (#686)
  • See full diff in compare view

Updates @graphql-codegen/cli from 7.3.1 to 7.4.3

Changelog

Sourced from @​graphql-codegen/cli's changelog.

7.4.3

Patch Changes

7.4.2

Patch Changes

  • #10956 cec9c1c Thanks @​eddeee888! - Fix dynamically-loaded plugins/presets in ESM builds. Previously, ESM used the bare module specifier without resolving it relative to the consuming project first, so a plugin only loaded if it happened to be reachable from the CLI package's own node_modules. Resolving it the same way the CJS build already does (relativeRequire.resolve(mod)) fixes that, but the resolved absolute path also has to be converted to a file:// URL (pathToFileURL(...).href) before being passed to import() — otherwise, on Windows, the loader misparses a raw path like C:\... as a c: protocol scheme and throws ERR_UNSUPPORTED_ESM_URL_SCHEME.

  • #10966 3029b60 Thanks @​eddeee888! - Fix lifecycle hook scripts (e.g. hooks: { afterAllFileWrite: ['prettier --write'] } }) failing on Windows when the file paths passed to them contain a backslash or other POSIX shell-special character. Hook arguments were always quoted using POSIX single-quoting, but child_process.exec() runs through cmd.exe on Windows by default, which doesn't strip single quotes — so the hook script received the literal quote characters as part of its argument and failed to find the file. Arguments are now quoted per-platform: POSIX quoting stays unchanged elsewhere, and Windows arguments are wrapped in double quotes only when they actually need it, matching cmd.exe's own convention.

  • #10959 7dffaae Thanks @​eddeee888! - Fix the CLI reporting success (exit code 0) when a generates output's preset can't be resolved. The error was shown in the terminal but never counted toward the run's failure state, so allowPartialOutputs: false (the default) never took effect for this case.

7.4.1

Patch Changes

... (truncated)

Commits
  • bec802b chore(release): update monorepo packages versions (#10984)
  • 5e06d7f feat: add description for --check flag to build options (#10225)
  • 1cb0310 chore(release): update monorepo packages versions (#10962)
  • cec9c1c [graphql-codegen-cli] fix: resolve dynamic plugin/preset imports in ESM, incl...
  • 17b158a [graphql-codegen-cli] test: add windows-latest coverage to dev-tests, then ve...
  • 3029b60 [graphql-codegen-cli] fix: quote lifecycle hook arguments per-platform on Win...
  • 62d0765 test: reproduce hooks.ts POSIX-only shell quoting breaking on Windows (#10965)
  • 7dffaae fix(cli): route preset-resolution errors into ctx.errors so allowPartialOutpu...
  • c9e38b1 test: reproduce silent preset-resolution failure under allowPartialOutputs=fa...
  • 6fc6ff2 Reorganize dev-test-apollo-tooling into dev-test directory (#10955)
  • Additional commits viewable in compare view

Updates @nestjs/testing from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/testing's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

Commits

Updates eslint from 10.9.1 to 10.11.0

Release notes

Sourced from eslint's releases.

v10.11.0

Features

  • d136fa4 feat: object-shorthand handle quoted properties for ignoreConstructors (#21271) (Pavel)
  • 397b3b8 feat: report unsafe labeled continue in no-unsafe-finally rule (#21316) (electrohyun)
  • d3dd47f feat: only exempt new-cap built-ins that reference the global (#21290) (sethamus)

Bug Fixes

  • 22b09f5 fix: ignore __proto__ properties in prefer-object-spread (#21311) (xbinaryx)
  • b684bb1 fix: make TimePass.parse optional in types and docs (#21313) (ntnyq)
  • 26d11bc fix: don't report __proto__ properties in object-shorthand (#21310) (xbinaryx)

Documentation

  • 9ecfdc5 docs: note that --cache can serve stale results for cross-file rules (#21312) (bytedoe)
  • 6c789ff docs: Update README (GitHub Actions Bot)
  • 5997825 docs: clarify preserve-caught-error known limitation (#21294) (Akinyemi Toluwalase)

Chores

  • 520dd77 perf: Implement fast paths in critical areas (#21210) (Nicholas C. Zakas)
  • 92086c8 test: update EMFILE error generation for Node.js 26.9.0 compatibility (#21330) (Francesco Trotta)
  • 9ac7eb6 chore: update github/codeql-action action to v4.38.0 (#21331) (renovate[bot])
  • 24310e3 chore: update ecosystem plugins (#21324) (ESLint Bot)
  • 45ad79e ci: bump pnpm/action-setup from 6.0.10 to 6.1.0 (#21318) (dependabot[bot])
  • ac74e37 chore: Add AGENTS.md with AI disclosure requirements (#21221) (Nicholas C. Zakas)
  • c832660 chore: Upgrade Stylelint to the latest version in docs (#21245) (Jung Hyeon Jun)
  • f9f88fc chore: update ecosystem plugins (#21308) (ESLint Bot)
  • fc81076 ci: add more types integration tests (#20395) (Nitin Kumar)

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)

@dependabot dependabot Bot added the 📦 Dependencies 의존성 업데이트 (Dependabot 등) label Oct 3, 2026
@coderabbitai

coderabbitai Bot commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: CaQuick/caquick-be/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 9cfbb58e-8a0e-400d-af62-839010d75ef8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 3, 2026

Copy link
Copy Markdown

🧹 knip — dead-code 리포트

Unused exported types (1)
전체 리포트 
Unused exported types (1)
RateLimitPolicy  type  src/global/rate-limit/index.ts:4:8

청소 후보(오탐 가능) · 기준 docs/guide/architecture-conventions.md

@github-actions

github-actions Bot commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown

🩺 NestJS Doctor — 90/100 (Excellent)

진단 475건 (error 12).

Category error warning info
architecture 1 1 42
correctness 0 260 0
performance 0 36 28
schema 0 0 75
security 11 21 0
architecture / security 상위 항목
  • error architecture/architecture/no-manual-instantiation: Manual instantiation of 'OutboxRepository' detected. Use dependency injection instead.
  • info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal type 'IAuditLogRepository'.
  • warning security/security/no-exposed-env-vars: Direct 'process.env.NODE_ENV' access in 'AuthController'. Use ConfigService instead.
  • warning security/security/require-guards-on-endpoints: Endpoint 'start' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'callback' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'refresh' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'logout' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogin' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'sellerRefresh' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogout' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'devIssueToken' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'adminLogin' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'adminRefresh' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'adminLogout' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'getJwks' has no @UseGuards() at class or method level.

오탐 포함 가능 · 기준 docs/guide/architecture-conventions.md

@github-actions

github-actions Bot commented Oct 3, 2026

Copy link
Copy Markdown

Coverage report

St.❔
 Category Percentage Covered / Total
🟢 Statements 97.88% 10084/10302
🟢 Branches 92.28% 3789/4106
🟢 Functions 97.32% 2034/2090
🟢 Lines 98.49% 9177/9318

Test suite run success

3900 tests passing in 354 suites.

Report generated by 🧪jest coverage report action from e37efd3

@codecov

codecov Bot commented Oct 3, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@chanwoo7 chanwoo7 mentioned this pull request Oct 4, 2026
Open
@dependabot
chore(deps): bump the npm-minor-patch group across 1 directory with 2…
21c2f58 
…0 updates

Bumps the npm-minor-patch group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1116.0` | `3.1145.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1116.0` | `3.1145.0` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.1` | `11.2.7` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.1` | `11.2.7` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.1` | `11.2.7` |
| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | `6.2.1` | `6.3.0` |
| [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli) | `7.3.1` | `7.4.3` |
| [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.2.1` | `11.2.7` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.11.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.13.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.2` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.39.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.6.0` |
| [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.2` | `3.24.5` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.0` |
| [testcontainers](https://github.com/testcontainers/testcontainers-node) | `12.1.0` | `12.2.0` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.12` | `29.4.14` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.71.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@aws-sdk/client-s3` from 3.1116.0 to 3.1145.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1145.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1116.0 to 3.1145.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1145.0/packages/s3-request-presigner)

Updates `@nestjs/common` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/common)

Updates `@nestjs/core` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/core)

Updates `@nestjs/platform-express` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/platform-express)

Updates `graphql-ws` from 6.2.1 to 6.3.0
- [Release notes](https://github.com/enisdenjo/graphql-ws/releases)
- [Changelog](https://github.com/enisdenjo/graphql-ws/blob/master/CHANGELOG.md)
- [Commits](enisdenjo/graphql-ws@v6.2.1...v6.3.0)

Updates `@graphql-codegen/cli` from 7.3.1 to 7.4.3
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@7.4.3/packages/graphql-codegen-cli)

Updates `@nestjs/testing` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/testing)

Updates `eslint` from 10.9.1 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.11.0)

Updates `globals` from 17.11.0 to 17.13.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.11.0...v17.13.0)

Updates `jest` from 30.4.2 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest)

Updates `knip` from 6.32.2 to 6.39.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.39.0/packages/knip)

Updates `lint-staged` from 17.3.0 to 17.6.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.3.0...v17.6.0)

Updates `mysql2` from 3.24.2 to 3.24.5
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.24.2...v3.24.5)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `supertest` from 7.2.2 to 7.3.0
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.2.2...v7.3.0)

Updates `testcontainers` from 12.1.0 to 12.2.0
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases)
- [Commits](testcontainers/testcontainers-node@v12.1.0...v12.2.0)

Updates `ts-jest` from 29.4.12 to 29.4.14
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.12...v29.4.14)

Updates `typescript-eslint` from 8.67.0 to 8.71.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.0/packages/typescript-eslint)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1143.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1143.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 7.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/common"
  dependency-version: 11.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/core"
  dependency-version: 11.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/testing"
  dependency-version: 11.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: eslint
  dependency-version: 10.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: graphql-ws
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: jest
  dependency-version: 30.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: knip
  dependency-version: 6.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: lint-staged
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: mysql2
  dependency-version: 3.24.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: supertest
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: testcontainers
  dependency-version: 12.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: ts-jest
  dependency-version: 29.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: typescript-eslint
  dependency-version: 8.71.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-patch-e7575a99e7 branch from e37efd3 to 21c2f58 Compare October 4, 2026 19:35
@github-actions

github-actions Bot commented Oct 4, 2026

Copy link
Copy Markdown

Coverage report

St.❔
 Category Percentage Covered / Total
🟢 Statements
97.91% (+0.01% 🔼)
 10063/10278
🟢 Branches
92.43% (+0.02% 🔼)
 3797/4108
🟢 Functions 97.45% 2026/2079
🟢 Lines 98.51% 9154/9292

Test suite run success

3782 tests passing in 357 suites.

Report generated by 🧪jest coverage report action from 21c2f58

@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-patch-e7575a99e7 branch October 12, 2026 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

📦 Dependencies 의존성 업데이트 (Dependabot 등)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants