Skip to content

chore(deps): bump the npm-minor-patch group across 1 directory with 21 updates - #530

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-fae9d65a4d
Open

chore(deps): bump the npm-minor-patch group across 1 directory with 21 updates#530
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-fae9d65a4d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-patch group with 21 updates in the / directory:

Package From To
@aws-sdk/client-s3 3.1116.0 3.1148.0
@aws-sdk/s3-request-presigner 3.1116.0 3.1148.0
@nestjs/common 11.2.1 11.2.7
@nestjs/core 11.2.1 11.2.7
@nestjs/platform-express 11.2.1 11.2.7
graphql-ws 6.2.1 6.3.0
@graphql-codegen/cli 7.3.1 7.4.5
@graphql-codegen/typescript-resolvers 6.1.0 6.1.1
@nestjs/testing 11.2.1 11.2.7
eslint 10.9.1 10.12.0
globals 17.11.0 17.13.0
jest 30.4.2 30.5.2
knip 6.32.2 6.40.0
lint-staged 17.3.0 17.6.0
mysql2 3.24.2 3.24.5
prettier 3.9.6 3.9.9
supertest 7.2.2 7.3.1
testcontainers 12.1.0 12.2.0
ts-jest 29.4.12 29.4.14
typescript-eslint 8.67.0 8.71.1
yaml 2.9.0 2.9.1

Updates @aws-sdk/client-s3 from 3.1116.0 to 3.1148.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1148.0

3.1148.0(2026-10-08)

Documentation Changes
  • client-sesv2: SESV2 DEED - Documentation Update (3d227df4)
New Features
  • client-pi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (1d99c7c8)
  • client-marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (404943ce)
  • client-emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (f9ed2f83)
  • client-cost-explorer: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (7e0afd11)
  • client-guardduty: Added support for GuardDuty RDS Data Activity Monitoring (aa200020)
  • client-gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (18121840)
  • client-datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (37214f3f)
  • client-devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (55b389d1)
  • client-security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (f4f6dfe5)
  • client-cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (07e146a5)
  • client-opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (393fb011)
  • client-lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (c7696bfa)
  • client-securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (f53e8a2a)
  • client-medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (e335e5dc)
  • client-eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (82f87e7c)
  • client-health: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (e2ffc014)
  • client-budgets: Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (722512d1)
  • client-translate: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (41abffc0)
  • client-glue: Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions. (9dc9c38c)
  • client-fms: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (bb5e227d)
  • client-codeconnections: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (5a0dceeb)
  • client-keyspaces: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (0f8c9874)
  • client-securityagent: Include model field for suggested remediation steps as part of findings (50a65bf4)
Bug Fixes
  • lib-transfer-manager: use the declared checksum algorithm in workers (#8331) (0317bb82)

For list of updated packages, view updated-packages.md in assets-3.1148.0.zip

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/client-s3

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/client-s3

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/client-s3

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/client-s3

3.1144.0 (2026-09-30)

Features

  • client-s3: Amazon S3 adds a new optional S3 Inventory field, IntelligentTieringReferenceDate, reporting the reference date S3 Intelligent-Tiering uses to evaluate an object's tier-transition eligibility. The value is populated for objects in the Intelligent-Tiering storage class and left blank for others. (82bbbdc)

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/client-s3

... (truncated)

Commits

Updates @aws-sdk/s3-request-presigner from 3.1116.0 to 3.1148.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1148.0

3.1148.0(2026-10-08)

Documentation Changes
  • client-sesv2: SESV2 DEED - Documentation Update (3d227df4)
New Features
  • client-pi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (1d99c7c8)
  • client-marketplace-agreement: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (404943ce)
  • client-emr-serverless: This release adds support for system profile logs for lakeformation enabled Spark connect sessions . (f9ed2f83)
  • client-cost-explorer: Adds a product attribute dimension to GetCostAndUsage, GetCostAndUsageWithResources, and GetDimensionValues, letting customers group, filter, and discover Cost Explorer costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (7e0afd11)
  • client-guardduty: Added support for GuardDuty RDS Data Activity Monitoring (aa200020)
  • client-gamelift: Amazon GameLift Servers container fleets now support CPU bursting for game server container groups. The TotalVcpuLimit property of a game server container group definition is now optional. When you omit it, the group has no CPU cap and its containers can burst into unused CPU on the instance. (18121840)
  • client-datazone: Adds support for multi-file notebook import. StartNotebookImport now accepts an s3Files source location with an ordered list of Amazon S3 objects, creating one notebook cell per file, plus a type field to create either a DATA or SQL notebook. (37214f3f)
  • client-devops-agent: Adds release management associations with private network access to AWS DevOps Agent, and a releaseManagementAssociationId field on GitHub and GitLab associations. This helps release management agents (Release-readiness review and Release Testing) access customer resources that are behind a VPC. (55b389d1)
  • client-security-ir: Adds support for retrieving finding-lifecycle metrics for an AWS Security Incident Response membership. (f4f6dfe5)
  • client-cloudformation: CloudFormation introduces force rollback, a new opt-in capability that lets your stacks complete a rollback even when an individual resource cannot be reverted. Set ForceRollback on ContinueUpdateRollback and CloudFormation records each resource that fails as skipped, completing the rollback. (07e146a5)
  • client-opensearch: This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains. (393fb011)
  • client-lambda: AWS Lambda now supports OAuth 2.0 (OAUTHBEARER), IAM, and IAM with OAUTHBEARER authentication for self-managed Apache Kafka event source mappings, including optional OAuth scope, audience, logical cluster, and identity pool parameters. OAuth 2.0 is also available for Confluent Schema Registry. (c7696bfa)
  • client-securityhub: Release findings export APIs - StartExportJobV2, GetExportJobV2, ListExportJobsV2, and CancelExportJobV2. This supports exporting findings from AWS Security Hub to Amazon S3 bucket. (f53e8a2a)
  • client-medialive: AWS Elemental MediaLive Workflow Monitor now supports AWS Elemental Inference feeds as a target resource type for CloudWatch alarm templates. (e335e5dc)
  • client-eks: Configurations support for EKS ACK Capabilities, including EnableCrossNamespace and DisableServices configuration. (82f87e7c)
  • client-health: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (e2ffc014)
  • client-budgets: Adds a product attribute dimension to CreateBudget and UpdateBudget, letting customers filter AWS Budgets costs by structured attributes such as Amazon Bedrock model, provider, inference type, and feature. (722512d1)
  • client-translate: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (41abffc0)
  • client-glue: Introduced GetSystemLogsForJobRun and GetSystemLogsForSession APIs, enabling account admins to retrieve system-space logs for FGAC-enabled Glue jobs and sessions. (9dc9c38c)
  • client-fms: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (bb5e227d)
  • client-codeconnections: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (5a0dceeb)
  • client-keyspaces: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (0f8c9874)
  • client-securityagent: Include model field for suggested remediation steps as part of findings (50a65bf4)
Bug Fixes
  • lib-transfer-manager: use the declared checksum algorithm in workers (#8331) (0317bb82)

For list of updated packages, view updated-packages.md in assets-3.1148.0.zip

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1144.0 (2026-09-30)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1143.0 (2026-09-29)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1142.0 (2026-09-28)

... (truncated)

Commits

Updates @nestjs/common from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/common's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

Commits

Updates @nestjs/core from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/core's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

Commits
  • c666d7f v11.2.7
  • c07cfb0 v11.2.6
  • e91618c chore(release): publish v11.2.5 release
  • d504622 chore(release): publish v11.2.4 release
  • 2b36ee5 chore(release): publish v11.2.3 release
  • e12b47b fix(core): circular durable providers issue #17562
  • 7e65752 chore(release): publish v11.2.2 release
  • 7ebaa88 chore: drop skip instrumentation - duplicated api
  • 4593b0a fix(core): preserve middleware arity #17554
  • 35a29cc fix(core): instrument middleware fallback issue
  • See full diff in compare view

Updates @nestjs/platform-express from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

Commits
  • c666d7f v11.2.7
  • c07cfb0 v11.2.6
  • fb8ecdb fix(deps): update dependency multer to v2.4.0 [security]
  • 58c3634 fix(express): map multer errors by code instead of message
  • e91618c chore(release): publish v11.2.5 release
  • d504622 chore(release): publish v11.2.4 release
  • 2b36ee5 chore(release): publish v11.2.3 release
  • 7e65752 chore(release): publish v11.2.2 release
  • See full diff in compare view

Updates graphql-ws from 6.2.1 to 6.3.0

Release notes

Sourced from graphql-ws's releases.

v6.3.0

Minor Changes

  • #691 b5f53cd Thanks @​niukanen1! - Add onPing and onPong server callbacks to ServerOptions, similar to onConnect and onDisconnect. The callbacks receive the connection Context as the first argument and the ping/pong payload as the second, allowing apps to log or react to subprotocol-level pings with access to connection state. The automatic pong reply is preserved when using the server-level onPing callback; the low-level websocket onPing listener still disables the automatic reply for full manual control.

Patch Changes

v6.2.2

Patch Changes

  • #690 1029314 Thanks @​Haasini-kudala! - Support crossws 0.4 by selecting the GraphQL WebSocket subprotocol during the upgrade handshake. Preserve automatic protocol negotiation in the legacy crossws 0.3 Node and uWebSockets adapters.

  • #686 536960e Thanks @​cpruijsen! - Fix the CrossWS adapter ignoring socket closes issued from server.opened

    makeHooks only registered the peer in the clients map after server.opened returned, while send/close no-op'd unless the peer was already in that map. A protocol-mismatch close (and any other close from inside opened) was therefore dropped, the WebSocket stayed open, and no ConnectionAck was ever sent because the message handler was never installed.

Changelog

Sourced from graphql-ws's changelog.

6.3.0

Minor Changes

  • #691 b5f53cd Thanks @​niukanen1! - Add onPing and onPong server callbacks to ServerOptions, similar to onConnect and onDisconnect. The callbacks receive the connection Context as the first argument and the ping/pong payload as the second, allowing apps to log or react to subprotocol-level pings with access to connection state. The automatic pong reply is preserved when using the server-level onPing callback; the low-level websocket onPing listener still disables the automatic reply for full manual control.

Patch Changes

6.2.2

Patch Changes

  • #690 1029314 Thanks @​Haasini-kudala! - Support crossws 0.4 by selecting the GraphQL WebSocket subprotocol during the upgrade handshake. Preserve automatic protocol negotiation in the legacy crossws 0.3 Node and uWebSockets adapters.

  • #686 536960e Thanks @​cpruijsen! - Fix the CrossWS adapter ignoring socket closes issued from server.opened

    makeHooks only registered the peer in the clients map after server.opened returned, while send/close no-op'd unless the peer was already in that map. A protocol-mismatch close (and any other close from inside opened) was therefore dropped, the WebSocket stayed open, and no ConnectionAck was ever sent because the message handler was never installed.

Commits
  • 53f321e Upcoming Release Changes (#694)
  • 93c8ebf fix: support Object prototype operation IDs (#695)
  • b5f53cd feat(server): add onPing and onPong callbacks to ServerOptions (#691)
  • c41433e Fix the client leaking memory per operation on long-living connections (#693)
  • 0c1765e Upcoming Release Changes (#687)
  • 1029314 fix(crossws): support version 0.4 protocol negotiation (#690)
  • 34cddf6 Update example to remove AsyncGenerator (#654) (#655)
  • 3649fab Update recipes.mdx abruptly closed example (#664)
  • 536960e fix(crossws): close the socket even if server.opened closes immediately (#686)
  • See full diff in compare view

Updates @graphql-codegen/cli from 7.3.1 to 7.4.5

Changelog

Sourced from @​graphql-codegen/cli's changelog.

7.4.5

Patch Changes

... (truncated)

Commits
  • e9081df chore(release): update monorepo packages versions (#11038)
  • 31761f9 chore(deps): bump @​graphql-tools/utils to v12 for GHSA-7mx3-vvmw-hjmv (#11043)
  • 1b0edd8 chore(release): update monorepo packages versions (#11008)
  • 43d0f65 Widen SchemaWithLoaderOptions.loader to accept a custom loader function (#11025)
  • ccc0d5c [visitor-plugin-common] fix: satisfy strict mode in base-resolvers-visitor (#...
  • 82ebbb5 [cli] fix: satisfy strict mode in cli (#4683) (#11020)
  • 7088be0 chore(deps): bump the security group across 1 directory with 4 updates (#11015)
  • bec802b chore(release): update monorepo packages versions (#10984)
  • 5e06d7f feat: add description for --check flag to build options (#10225)
  • 1cb0310 chore(release): update monorepo packages versions (#10962)
  • Additional commits viewable in compare view

Updates @graphql-codegen/typescript-resolvers from 6.1.0 to 6.1.1

Changelog

Sourced from @​graphql-codegen/typescript-resolvers's changelog.

6.1.1

Patch Changes

  • #11043 31761f9 Thanks @​eddeee888! - dependencies updates:

  • #11043 31761f9 Thanks @​eddeee888! - Update @graphql-tools/utils to v12, and other @graphql-tools/* dependencies and graphql-config to releases that use it, to pick up the fix for GHSA-7mx3-vvmw-hjmv (prototype pollution in mergeDeep, @graphql-tools/utils <= 12.0.0).

    @graphql-codegen/cli now unwraps the AggregateError that newer @graphql-tools/load versions throw, so schema and document syntax errors still print the native GraphQLError with its file location.

  • Updated dependencies [31761f9, 31761f9, 31761f9, 463e6ef]:

    • @​graphql-codegen/plugin-helpers@​7.4.2
    • @​graphql-codegen/visitor-plugin-common@​7.2.9
Commits

Updates @nestjs/testing from 11.2.1 to 11.2.7

Release notes

Sourced from @​nestjs/testing's releases.

v11.2.6

What's changed

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

What's changed

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

  • fix(microservices): handle unserializable patterns without crashing
  • fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

  • fix(core): ObserveInstrument breaks app startup with @nestj...

    Description has been truncated

@dependabot
chore(deps): bump the npm-minor-patch group across 1 directory with 2…
773bde4 
…1 updates

Bumps the npm-minor-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1116.0` | `3.1148.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1116.0` | `3.1148.0` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.1` | `11.2.7` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.1` | `11.2.7` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.1` | `11.2.7` |
| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | `6.2.1` | `6.3.0` |
| [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli) | `7.3.1` | `7.4.5` |
| [@graphql-codegen/typescript-resolvers](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/plugins/typescript/resolvers) | `6.1.0` | `6.1.1` |
| [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.2.1` | `11.2.7` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.12.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.13.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.2` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.32.2` | `6.40.0` |
| [lint-staged](https://github.com/lint-staged/lint-staged) | `17.3.0` | `17.6.0` |
| [mysql2](https://github.com/sidorares/node-mysql2) | `3.24.2` | `3.24.5` |
| [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.9` |
| [supertest](https://github.com/ladjs/supertest) | `7.2.2` | `7.3.1` |
| [testcontainers](https://github.com/testcontainers/testcontainers-node) | `12.1.0` | `12.2.0` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.12` | `29.4.14` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.67.0` | `8.71.1` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@aws-sdk/client-s3` from 3.1116.0 to 3.1148.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1148.0/clients/client-s3)

Updates `@aws-sdk/s3-request-presigner` from 3.1116.0 to 3.1148.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1148.0/packages/s3-request-presigner)

Updates `@nestjs/common` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/common)

Updates `@nestjs/core` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/core)

Updates `@nestjs/platform-express` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/platform-express)

Updates `graphql-ws` from 6.2.1 to 6.3.0
- [Release notes](https://github.com/enisdenjo/graphql-ws/releases)
- [Changelog](https://github.com/enisdenjo/graphql-ws/blob/master/CHANGELOG.md)
- [Commits](enisdenjo/graphql-ws@v6.2.1...v6.3.0)

Updates `@graphql-codegen/cli` from 7.3.1 to 7.4.5
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@7.4.5/packages/graphql-codegen-cli)

Updates `@graphql-codegen/typescript-resolvers` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/plugins/typescript/resolvers/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/typescript-resolvers@6.1.1/packages/plugins/typescript/resolvers)

Updates `@nestjs/testing` from 11.2.1 to 11.2.7
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.7/packages/testing)

Updates `eslint` from 10.9.1 to 10.12.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.12.0)

Updates `globals` from 17.11.0 to 17.13.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.11.0...v17.13.0)

Updates `jest` from 30.4.2 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest)

Updates `knip` from 6.32.2 to 6.40.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.40.0/packages/knip)

Updates `lint-staged` from 17.3.0 to 17.6.0
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.3.0...v17.6.0)

Updates `mysql2` from 3.24.2 to 3.24.5
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.24.2...v3.24.5)

Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.9)

Updates `supertest` from 7.2.2 to 7.3.1
- [Release notes](https://github.com/ladjs/supertest/releases)
- [Commits](forwardemail/supertest@v7.2.2...v7.3.1)

Updates `testcontainers` from 12.1.0 to 12.2.0
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases)
- [Commits](testcontainers/testcontainers-node@v12.1.0...v12.2.0)

Updates `ts-jest` from 29.4.12 to 29.4.14
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](kulshekhar/ts-jest@v29.4.12...v29.4.14)

Updates `typescript-eslint` from 8.67.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1148.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1148.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/common"
  dependency-version: 11.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/core"
  dependency-version: 11.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: graphql-ws
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 7.4.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@graphql-codegen/typescript-resolvers"
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@nestjs/testing"
  dependency-version: 11.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: eslint
  dependency-version: 10.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: globals
  dependency-version: 17.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: jest
  dependency-version: 30.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: knip
  dependency-version: 6.40.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: lint-staged
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: mysql2
  dependency-version: 3.24.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: supertest
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: testcontainers
  dependency-version: 12.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: ts-jest
  dependency-version: 29.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the 📦 Dependencies 의존성 업데이트 (Dependabot 등) label Oct 12, 2026
@coderabbitai

coderabbitai Bot commented Oct 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: CaQuick/caquick-be/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 37cc21f8-79f0-423d-94bd-1739631e13ed

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

🧹 knip — dead-code 리포트

Unused exported types (1)
전체 리포트 
Unused exported types (1)
RateLimitPolicy  type  src/global/rate-limit/index.ts:4:8

청소 후보(오탐 가능) · 기준 docs/guide/architecture-conventions.md

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

🩺 NestJS Doctor — 90/100 (Excellent)

진단 484건 (error 12).

Category error warning info
architecture 1 1 44
correctness 0 266 0
performance 0 36 28
schema 0 0 76
security 11 21 0
architecture / security 상위 항목
  • error architecture/architecture/no-manual-instantiation: Manual instantiation of 'OutboxRepository' detected. Use dependency injection instead.
  • info architecture/architecture/no-barrel-export-internals: Barrel file re-exports internal type 'IAuditLogRepository'.
  • warning security/security/no-exposed-env-vars: Direct 'process.env.NODE_ENV' access in 'AuthController'. Use ConfigService instead.
  • warning security/security/require-guards-on-endpoints: Endpoint 'start' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'callback' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'refresh' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'logout' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogin' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'sellerRefresh' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'sellerLogout' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'devIssueToken' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'adminLogin' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'adminRefresh' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'adminLogout' has no @UseGuards() at class or method level.
  • warning security/security/require-guards-on-endpoints: Endpoint 'getJwks' has no @UseGuards() at class or method level.

오탐 포함 가능 · 기준 docs/guide/architecture-conventions.md

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

Coverage report

St.❔
 Category Percentage Covered / Total
🟢 Statements 98% 10692/10910
🟢 Branches 92.92% 4070/4380
🟢 Functions 97.53% 2133/2187
🟢 Lines 98.57% 9728/9869

Test suite run success

4262 tests passing in 384 suites.

Report generated by 🧪jest coverage report action from 773bde4

@codecov

codecov Bot commented Oct 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

📦 Dependencies 의존성 업데이트 (Dependabot 등)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants