Skip to content

npm-backend: bump the backend-major-updates group across 1 directory with 19 updates - #6588

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sources/packages/backend/backend-major-updates-4a15cec123
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sources/packages/backend/backend-major-updates-4a15cec123

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend-major-updates group with 19 updates in the /sources/packages/backend directory:

Package From To
@nestjs/axios 4.0.1 12.0.0
@nestjs/bull 11.0.5 12.0.0
@nestjs/common 11.2.1 12.0.1
@nestjs/core 11.2.1 12.0.1
@nestjs/jwt 11.0.2 12.0.1
@nestjs/mapped-types 2.1.1 12.0.0
@nestjs/microservices 11.2.1 12.0.1
@nestjs/passport 11.0.5 12.0.0
@nestjs/platform-express 11.2.1 12.0.1
@nestjs/swagger 11.4.7 12.0.1
@nestjs/terminus 11.1.1 12.0.0
@nestjs/typeorm 11.0.3 12.0.1
ioredis 5.11.1 6.0.0
redis 5.12.1 6.2.1
typeorm 0.3.31 1.1.1
@nestjs/cli 11.0.24 12.0.0
@nestjs/schematics 11.1.0 12.0.1
@nestjs/testing 11.2.1 12.0.1
typescript 6.0.3 7.0.2

Updates @nestjs/axios from 4.0.1 to 12.0.0

Release notes

Sourced from @​nestjs/axios's releases.

Release 12.0.0

What's Changed

@nestjs/axios is now a native ES module, and the major version is aligned with the Nest 12 release line (there is no 5.x — 4.0.1 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root:

import { HttpModule, HttpService } from '@nestjs/axios';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, a CommonJS app can keep doing:

const { HttpModule, HttpService } = require('@nestjs/axios');

This is why the supported Node range is now declared explicitly:

"engines": {
  "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
}

Those are the versions where require(esm) is available and unflagged. On older Node releases, requiring this package will fail with ERR_REQUIRE_ESM.

Upgrading

For most applications, the upgrade is:

npm i @nestjs/axios@12

Then check that:

  1. You are on Node 20.19+ / 22.12+ / 24+.
  2. You do not import from internal paths such as @nestjs/axios/dist/... — import from the package root instead.
  3. If you were importing from the removed root index.js shim path explicitly, drop the path and import the package by name.
Commits
  • 10cefb3 chore(): release v12.0.0
  • a988df5 chore: upgrade to v12
  • c4b9df9 chore(deps): update dependency axios to v1.20.0 (#1781)
  • 210caf2 chore(deps): update nest monorepo to v11.2.3 (#1780)
  • 3266444 chore(deps): update dependency oxlint to v1.80.0 (#1779)
  • 5fe2ad4 chore(deps): update dependency vite to v8.2.2 (#1778)
  • a909611 chore(deps): update dependency oxlint to v1.79.0 (#1777)
  • 405c7e2 chore(deps): update dependency vitest to v4.1.11 (#1776)
  • df9a2ca test: enable legacy decorators for spec files
  • 60154c8 Merge remote-tracking branch 'origin/master'
  • Additional commits viewable in compare view

Updates @nestjs/bull from 11.0.5 to 12.0.0

Release notes

Sourced from @​nestjs/bull's releases.

@​nestjs/bull-shared@​12.0.0

What's Changed

@nestjs/bull, @nestjs/bullmq, and @nestjs/bull-shared are now native ES modules, and the major version is aligned with the Nest 12 release line.

ESM migration

All three packages are published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. Deep imports into build internals are no longer resolvable — import from the package root:

// still fine
import { BullModule, InjectQueue, Processor } from '@nestjs/bullmq';
// no longer resolvable
import { BullExplorer } from '@​nestjs/bullmq/dist/bull.explorer';

./package.json is exposed as a subpath for tooling that resolves the manifest through the package specifier.

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, the exports map ships a require condition alongside import, so require('@nestjs/bullmq') from a CommonJS Nest app keeps working. This needs Node 20.19+, 22.12+, or 24+ — the versions where require(esm) is enabled by default.

TypeScript consumers should be on "moduleResolution": "node16", "nodenext", or "bundler" so the exports map is honored.

@​nestjs/bull@​12.0.0

What's Changed

@nestjs/bull, @nestjs/bullmq, and @nestjs/bull-shared are now native ES modules, and the major version is aligned with the Nest 12 release line.

ESM migration

All three packages are published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. Deep imports into build internals are no longer resolvable — import from the package root:

// still fine
import { BullModule, InjectQueue, Processor } from '@nestjs/bullmq';
// no longer resolvable
import { BullExplorer } from '@​nestjs/bullmq/dist/bull.explorer';

./package.json is exposed as a subpath for tooling that resolves the manifest through the package specifier.

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, the exports map ships a require condition alongside import, so require('@nestjs/bullmq') from a CommonJS Nest app keeps working. This needs Node 20.19+, 22.12+, or 24+ — the versions where require(esm) is enabled by default.

TypeScript consumers should be on "moduleResolution": "node16", "nodenext", or "bundler" so the exports map is honored.

... (truncated)

Commits
  • 1ee6596 chore(release): publish new releases
  • 1aaa028 chore: resolve conflicts
  • 7e14d30 chore: upgrade to v12
  • f4c01b0 chore(deps): update dependency bullmq to v6.3.1 (#2893)
  • 8dbd280 chore(deps): update dependency oxlint to v1.80.0 (#2892)
  • 5767b19 chore(deps): update dependency bullmq to v6.2.2 (#2890)
  • a2ebecb chore(deps): update nest monorepo to v11.2.3 (#2891)
  • 3b07d26 chore(deps): update dependency bullmq to v6.2.0 (#2889)
  • d815bd9 chore(deps): update dependency lerna to v10.0.1 (#2888)
  • 86beb81 chore(deps): update dependency oxlint to v1.79.0 (#2887)
  • Additional commits viewable in compare view

Updates @nestjs/common from 11.2.1 to 12.0.1

Release notes

Sourced from @​nestjs/common's releases.

v12.0.0

NestJS v12.0.0

NestJS 12 is centered around ESM-ready packages, first-class Standard Schema support for validation and serialization, a rebuilt CLI, and native observability through the new @nestjs/observe SDK.

Existing CommonJS applications keep working — migrating your own code to ESM is entirely optional.

📖 Full migration guide


Upgrading

Upgrade the CLI first, since the upgrade command ships with it:

npm i -g @nestjs/cli@latest

Then, from the root of your project:

nest upgrade

nest upgrade moves every @nestjs/* package to its v12-compatible major at once and applies the mechanical parts of the migration for you — nest-cli.json webpack options, the GraphQL playgroundgraphiql rename and subscriptions transport swap, the NATS package replacement, @nestjs/config validation options, Jest and Joi bumps — then prints a report of everything it changed and everything you still need to review by hand. Run it with --dry-run first to see that report without touching your files.

It deliberately does not migrate your project to ESM, Vitest, or oxlint. Those are the defaults for newly generated projects; existing projects adopt them on their own schedule.

Node.js: v12 requires Node.js v20.19+ or v22.12+. Both require(esm) and the ESM packages depend on it; the upgrade command refuses to run on older releases (including the 21.x line). The latest active LTS is recommended.


Highlights

ESM packages

All core Nest packages now ship as ESM. Thanks to require(esm) in modern Node.js, most existing CommonJS applications continue to work without a rewrite. Review custom bootstrapping scripts, build tooling, and test runners if they assume CommonJS-only packages.

nest new now asks whether to scaffold a CommonJS or an ESM project.

Standard Schema validation

Route parameter decorators — @Body(), @Query(), @Param(), @RawBody() — accept a new schema option, designed for Standard Schema compatible libraries such as Zod, Valibot, and ArkType:

@Post()
create(@Body({ schema: createUserSchema }) body: CreateUserDto) {
  return this.usersService.create(body);
}
</tr></table> 

... (truncated)

Commits
  • 4c751c5 chore(release): publish v12.0.1 release
  • 6494a6c chore(release): publish v12.0.0 release
  • e306724 fix(deps): update dependency file-type to v22
  • edb0034 Merge branch 'master' into v12.0.0
  • e255755 chore: resolve conflicts, minor fixes
  • 5d1b19b Merge branch 'master' into v12.0.0
  • a2c25c2 Merge pull request #17028 from OlegStrokan/feat/get-transport-server
  • 5f2618a fix(common): Reject hex and non-numeric strings in parse-float pipe
  • See full diff in compare view

Updates @nestjs/core from 11.2.1 to 12.0.1

Release notes

Sourced from @​nestjs/core's releases.

v12.0.0

NestJS v12.0.0

NestJS 12 is centered around ESM-ready packages, first-class Standard Schema support for validation and serialization, a rebuilt CLI, and native observability through the new @nestjs/observe SDK.

Existing CommonJS applications keep working — migrating your own code to ESM is entirely optional.

📖 Full migration guide


Upgrading

Upgrade the CLI first, since the upgrade command ships with it:

npm i -g @nestjs/cli@latest

Then, from the root of your project:

nest upgrade

nest upgrade moves every @nestjs/* package to its v12-compatible major at once and applies the mechanical parts of the migration for you — nest-cli.json webpack options, the GraphQL playgroundgraphiql rename and subscriptions transport swap, the NATS package replacement, @nestjs/config validation options, Jest and Joi bumps — then prints a report of everything it changed and everything you still need to review by hand. Run it with --dry-run first to see that report without touching your files.

It deliberately does not migrate your project to ESM, Vitest, or oxlint. Those are the defaults for newly generated projects; existing projects adopt them on their own schedule.

Node.js: v12 requires Node.js v20.19+ or v22.12+. Both require(esm) and the ESM packages depend on it; the upgrade command refuses to run on older releases (including the 21.x line). The latest active LTS is recommended.


Highlights

ESM packages

All core Nest packages now ship as ESM. Thanks to require(esm) in modern Node.js, most existing CommonJS applications continue to work without a rewrite. Review custom bootstrapping scripts, build tooling, and test runners if they assume CommonJS-only packages.

nest new now asks whether to scaffold a CommonJS or an ESM project.

Standard Schema validation

Route parameter decorators — @Body(), @Query(), @Param(), @RawBody() — accept a new schema option, designed for Standard Schema compatible libraries such as Zod, Valibot, and ArkType:

@Post()
create(@Body({ schema: createUserSchema }) body: CreateUserDto) {
  return this.usersService.create(body);
}
</tr></table> 

... (truncated)

Commits
  • 4c751c5 chore(release): publish v12.0.1 release
  • 3c25112 chore: update peer deps
  • 6494a6c chore(release): publish v12.0.0 release
  • c9d59f2 chore: expose missing internals
  • 45485b5 fix(core): circular durable providers issue #17562
  • f94e9eb fix(core): preserve middleware arity and harden instance decorator
  • 1dcbc25 fix(core): instrument midldeware issue #17554
  • f5bf4dd docs(core): update Mercure SSE header comment to current path
  • edb0034 Merge branch 'master' into v12.0.0
  • e255755 chore: resolve conflicts, minor fixes
  • Additional commits viewable in compare view

Updates @nestjs/jwt from 11.0.2 to 12.0.1

Release notes

Sourced from @​nestjs/jwt's releases.

Release 12.0.1

  • fix: jsonwebtoken esm imports (05d0075)

Release 12.0.0

What's Changed

@nestjs/jwt is now a native ES module, and the major version is aligned with the Nest 12 release line

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

// ✅
import { JwtModule, JwtService } from '@nestjs/jwt';
// ❌ no longer resolvable
import { JwtService } from '@​nestjs/jwt/dist/jwt.service';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support (Node 20.19+, 22.12+, and all of 24.x), a CommonJS Nest application can keep requiring the package exactly as before:

const { JwtModule, JwtService } = require('@nestjs/jwt');

TypeScript users compiling to CommonJS are unaffected as long as their runtime is on a supported Node version. On older Node releases, require() of this package will throw ERR_REQUIRE_ESM — upgrade Node, or switch the consuming code to import.

jsonwebtoken re-exports

The error classes re-exported from jsonwebtoken (TokenExpiredError, NotBeforeError, JsonWebTokenError) are now re-exported explicitly by name instead of via a star export, so they resolve correctly under ESM interop with the CJS jsonwebtoken package. No import changes are needed on your side:

import { TokenExpiredError } from '@nestjs/jwt';

Upgrading

npm install @nestjs/jwt@12

For most applications this is a drop-in upgrade. Action is only required if you were relying on deep imports into dist/, or are running a Node version older than 20.19 with a CommonJS app.

Commits
  • 6c75fa6 chore(): release v12.0.1
  • 05d0075 fix: jsonwebtoken esm imports
  • 8853ee8 chore(): release v12.0.0
  • b8455f2 chore: upgrade to v12
  • 542e29e chore(deps): update dependency oxlint to v1.80.0 (#2260)
  • ae0d0d7 chore(deps): update nest monorepo to v11.2.3 (#2259)
  • af3ad43 chore(deps): update dependency oxlint to v1.79.0 (#2258)
  • 53c8fee chore(deps): update dependency vitest to v4.1.11 (#2257)
  • 7014c3a Merge pull request #2205 from nestjs/renovate/cimg-node-24.x
  • 54a4c5c Merge pull request #2186 from nestjs/chore/esm-migration
  • Additional commits viewable in compare view

Updates @nestjs/mapped-types from 2.1.1 to 12.0.0

Release notes

Sourced from @​nestjs/mapped-types's releases.

Release 12.0.0

What's Changed

@nestjs/mapped-types is now a native ES module, and the major version is aligned with the Nest 12 release line (there is no 3.x2.1.1 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, this keeps working:

const { PartialType } = require('@nestjs/mapped-types');
Commits
  • 47bf940 chore(): release v12.0.0
  • cd569d5 chore: upgrade to v12 deps
  • 54c3e26 chore(deps): update dependency oxlint to v1.80.0 (#2026)
  • 6b06282 chore(deps): update dependency @​nestjs/common to v11.2.3 (#2025)
  • ab015f0 chore(deps): update dependency vite to v8.2.2 (#2024)
  • c7960d5 chore(deps): update dependency oxlint to v1.79.0 (#2023)
  • fdc3f31 chore(deps): update dependency vitest to v4.1.11 (#2022)
  • 84b5a54 Merge pull request #1989 from nestjs/renovate/vite-8.x-lockfile
  • a4e403e chore(deps): update dependency vite to v8.2.1
  • 9a7c342 test: update vitest config
  • Additional commits viewable in compare view

Updates @nestjs/microservices from 11.2.1 to 12.0.1

Release notes

Sourced from @​nestjs/microservices's releases.

v12.0.0

NestJS v12.0.0

NestJS 12 is centered around ESM-ready packages, first-class Standard Schema support for validation and serialization, a rebuilt CLI, and native observability through the new @nestjs/observe SDK.

Existing CommonJS applications keep working — migrating your own code to ESM is entirely optional.

📖 Full migration guide


Upgrading

Upgrade the CLI first, since the upgrade command ships with it:

npm i -g @nestjs/cli@latest

Then, from the root of your project:

nest upgrade

nest upgrade moves every @nestjs/* package to its v12-compatible major at once and applies the mechanical parts of the migration for you — nest-cli.json webpack options, the GraphQL playgroundgraphiql rename and subscriptions transport swap, the NATS package replacement, @nestjs/config validation options, Jest and Joi bumps — then prints a report of everything it changed and everything you still need to review by hand. Run it with --dry-run first to see that report without touching your files.

It deliberately does not migrate your project to ESM, Vitest, or oxlint. Those are the defaults for newly generated projects; existing projects adopt them on their own schedule.

Node.js: v12 requires Node.js v20.19+ or v22.12+. Both require(esm) and the ESM packages depend on it; the upgrade command refuses to run on older releases (including the 21.x line). The latest active LTS is recommended.


Highlights

ESM packages

All core Nest packages now ship as ESM. Thanks to require(esm) in modern Node.js, most existing CommonJS applications continue to work without a rewrite. Review custom bootstrapping scripts, build tooling, and test runners if they assume CommonJS-only packages.

nest new now asks whether to scaffold a CommonJS or an ESM project.

Standard Schema validation

Route parameter decorators — @Body(), @Query(), @Param(), @RawBody() — accept a new schema option, designed for Standard Schema compatible libraries such as Zod, Valibot, and ArkType:

@Post()
create(@Body({ schema: createUserSchema }) body: CreateUserDto) {
  return this.usersService.create(body);
}
</tr></table> 

... (truncated)

Commits
  • 4c751c5 chore(release): publish v12.0.1 release
  • 3c25112 chore: update peer deps
  • 6494a6c chore(release): publish v12.0.0 release
  • 3f8a0ce fix(microservices): handle non-json mqtt response packets gracefully
  • f94e9eb fix(core): preserve middleware arity and harden instance decorator
  • edb0034 Merge branch 'master' into v12.0.0
  • e255755 chore: resolve conflicts, minor fixes
  • 5d1b19b Merge branch 'master' into v12.0.0
  • 4063cdb feat(microservices): expose transport server getter
  • See full diff in compare view

Updates @nestjs/passport from 11.0.5 to 12.0.0

Release notes

Sourced from @​nestjs/passport's releases.

Release 12.0.0

What's Changed

@nestjs/passport is now a native ES module, and the major version is aligned with the Nest 12 release line.

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals (e.g. @nestjs/passport/dist/auth.guard) are no longer resolvable — import from the package root:

import { AuthGuard, PassportModule, PassportStrategy } from '@nestjs/passport';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, a CommonJS app can keep doing:

const { AuthGuard, PassportModule } = require('@nestjs/passport');

This requires Node.js 20.19+ or 22.12+ (where require(esm) is enabled by default). On older Node versions you must either upgrade Node or move your app to ESM.

AuthGuard no longer forwards module options to passport.authenticate()

defaultStrategy and property — options that belong to PassportModule.register(), not to Passport itself — were being passed straight through to passport.authenticate(), where they could collide with strategy-level options. They are now stripped before the call, so a strategy only ever receives real AuthenticateOptions.

The signature of getAuthenticateOptions() changed accordingly:

// before
getAuthenticateOptions(
  context: ExecutionContext,
): Promise<IAuthModuleOptions> | IAuthModuleOptions | undefined;
// after
getAuthenticateOptions(
context: ExecutionContext,
):
| Promise<AuthGuardAuthenticateOptions>
| AuthGuardAuthenticateOptions
| undefined;

AuthGuardAuthenticateOptions is exported from the package root and is passport.AuthenticateOptions with defaultStrategy explicitly disallowed. If you override getAuthenticateOptions() and return defaultStrategy, TypeScript will now flag it — remove it and set it via PassportModule.register({ defaultStrategy: '...' }) instead.

Peer dependencies

"peerDependencies": {
</tr></table> 

... (truncated)

Commits
  • 0f15350 chore(): release v12.0.0
  • c6af6f6 chore: upgrade to v12
  • d05c93e chore(deps): update dependency oxlint to v1.80.0 (#2309)
  • 8d06e0c chore(deps): update nest monorepo to v11.2.3 (#2308)
  • 875fddc chore(deps): update dependency oxlint to v1.79.0 (#2307)
  • dd63061 chore(deps): update vitest monorepo to v4.1.11 (#2306)
  • 28e6701 Merge pull request #2300 from GiHoon1123/fix-947-authenticate-options
  • 849d11c Merge master into fix-947-authenticate-options, resolve conflicts
  • de02b20 Merge pull request #2250 from nestjs/renovate/cimg-node-24.x
  • e27a9c8 Merge pull request #2230 from nestjs/chore/esm-migration
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.2.1 to 12.0.1

Release notes

Sourced from @​nestjs/platform-express's releases.

v12.0.0

NestJS v12.0.0

NestJS 12 is centered around ESM-ready packages, first-class Standard Schema support for validation and serialization, a rebuilt CLI, and native observability through the new @nestjs/observe SDK.

Existing CommonJS applications keep working — migrating your own code to ESM is entirely optional.

📖 Full migration guide


Upgrading

Upgrade the CLI first, since the upgrade command ships with it:

npm i -g @nestjs/cli@latest

Then, from the root of your project:

nest upgrade

nest upgrade moves every @nestjs/* package to its v12-compatible major at once and applies the mechanical parts of the migration for you — nest-cli.json webpack options, the GraphQL playgroundgraphiql rename and subscriptions transport swap, the NATS package replacement, @nestjs/config validation options, Jest and Joi bumps — then prints a report of everything it changed and everything you still need to review by hand. Run it with --dry-run first to see that report without touching your files.

It deliberately does not migrate your project to ESM, Vitest, or oxlint. Those are the defaults for newly generated projects; existing projects adopt them on their own schedule.

Node.js: v12 requires Node.js v20.19+ or v22.12+. Both require(esm) and the ESM packages depend on it; the upgrade command refuses to run on older releases (including the 21.x line). The latest active LTS is recommended.


Highlights

ESM packages

All core Nest packages now ship as ESM. Thanks to require(esm) in modern Node.js, most existing CommonJS applications continue to work without a rewrite. Review custom bootstrapping scripts, build tooling, and test runners if they assume CommonJS-only packages.

nest new now asks whether to scaffold a CommonJS or an ESM project.

Standard Schema validation

Route parameter decorators — @Body(), @Query(), @Param(), @RawBody() — accept a new schema option, designed for Standard Schema compatible libraries such as Zod, Valibot, and ArkType:

@Post()
create(@Body({ schema: createUserSchema }) body: CreateUserDto) {
  return this.usersService.create(body);
}
</tr></table> 

... (truncated)

Commits
  • 4c751c5 chore(release): publish v12.0.1 release
  • 3c25112 chore: update peer deps
  • 6494a6c chore(release): publish v12.0.0 release
  • e03cf5c fix(express,fastify): apply falsy status codes in reply()
  • edb0034 Merge branch 'master' into v12.0.0
  • e255755 chore: resolve conflicts, minor fixes
  • 5d1b19b Merge branch 'master' into v12.0.0
  • 043e951 fix(platform-express): address body parser review comments
  • 361ce5f feat: narrow body parser options to the selected parser
  • 68dfc23 Merge branch 'master' into v12.0.0
  • Additional commits viewable in compare view

Updates @nestjs/swagger from 11.4.7 to 12.0.1

Release notes

Sourced from @​nestjs/swagger's releases.

Release 12.0.1

12.0.1 (2026-08-28)

Bug fixes

Dependencies

Committers: 1

Release 12.0.0

What's Changed

@nestjs/swagger is now a native ES module, requires Nest 12, and changes how nullable schemas are spelled in the generated document.

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.ts / plugin.js / plugin.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root (@nestjs/swagger) or from @nestjs/swagger/plugin.

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, a CommonJS app can keep doing const { SwaggerModule } = require('@nestjs/swagger'). The CLI plugin entry (@nestjs/swagger/plugin) also keeps a require condition so nest-cli.json setups load it unchanged.

This is why the package now declares "engines": { "node": "^20.19.0 || >=22.12.0" } — those are the Node versions where require(esm) is available without a flag.

Nest 12 peer dependencies

@nestjs/common and @nestjs/core peers are now ^12.0.0. @nestjs/mapped-types moves to 12.0.0 (itself ESM, with its major aligned to the Nest 12 line), so PartialType, PickType, OmitType and IntersectionType come from an ESM build too.

Standard Schema support

Schemas passed to Nest 12's route decorators (for example @Body({ schema: z.object({ ... }) })) can now be reflected into the OpenAPI document. Supply an adapter via the new standardSchemaConverter document option:

import { SwaggerModule, DocumentBuilder } from '@nestjs/swagger';
import type { SwaggerDocumentOptions } from '@nestjs/swagger';
import { createSchema } from 'zod-openapi';
import type { ZodType } from 'zod';
// Standard Schema exposes the producing library under ~standard.vendor,
// which is how you narrow the raw value to a library-specific type.
function isZodSchema(schema: unknown): schema is ZodType {
return (
!!schema &&
typeof schema === 'object' &&
(schema as { '~standard'?: { vendor?: string } })['~standard']?.vendor ===
'zod'
);
</tr></table>

... (truncated)

Commits
  • 4274e7c chore(): release v12.0.1
  • 325d009 Merge pull request #4082 from nestjs/fix/esm-hoist-static-imports
  • 8980a54 fix: esm hoist static imports
  • 31b0bf4 chore(deps): update dependency lint-staged to v17.4.1 (#4078)
  • b71a812 Merge pull request #4077 from nestjs/renovate/swagger-ui-dist-5.x-lockfile
  • ec18a13 chore(deps): update dependency swagger-ui-dist to v5.32.14
  • 0f85b4c Merge pull request #4072 from nestjs/renovate/js-yaml-5.x
  • 7d8b38e Merge pull request #4076 from nestjs/renovate/vite-8.x-lockfile
  • ebc4cb8 Merge pull request #4069 from nestjs/renovate/zod-openapi-6.x
  • 71e1769 Merge pull request #4068 from nestjs/renovate/swagger-ui-dist-5.x
  • Additional commits viewable in compare view

Updates @nestjs/terminus from 11.1.1 to 12.0.0

Release notes

Sourced from @​nestjs/terminus's releases.

Release 12.0.0

12.0.0 (2026-08-31)

Bug Fixes

  • close the microservice client when the ping fails (8826bc6)
  • http: create a dedicated HttpService instead of resolving from DI (163bfef), closes #2667
  • microservice: stop RMQ pingCheck from asserting a queue per probe (9afc532), closes #2680
  • mongoose: ping the database instead of checking readyState (e1c6486), closes #2661
  • set shutting_down before awaiting the graceful shutdown timeout (1615c29)

Features

  • ship the package as ESM (fae6663)
  • add attempt() function (ef9ab99)
  • add degraded status for health indicator (1cfb8af)
  • add responseTime to the HealthCheckResult (a0434ae)
  • @nestjs/terminus no longer has runtime dependencies

BREAKING CHANGES

  • the package is now ESM-only and requires Node ^20.19.0 || ^22.12.0 || >=24.0.0.
  • the deprecated HealthIndicator base class and its getStatus() have been removed. Migrate custom indicators to HealthIndicatorService: super.getStatus(key, isHealthy, data) becomes this.healthIndicatorService.check(key).up(data) / .down(data).
  • the deprecated error classes are no longer exported: HealthCheckError, ConnectionNotFoundError, TimeoutError, StorageExceededError, UnhealthyResponseCodeError, MongoConnectionError.
  • throwing inside a health indicator no longer produces a 503. In v11, a thrown HealthCheckError was unwrapped into the health check result; now any thrown error is treated as an unexpected failure (500) and only a returned down result marks the check unhealthy (503).

Release 12.0.0-next.1

12.0.0-next.1 (2026-08-31)

Features

  • add .cacheFor() builder (ba59644)
  • add degraded status for health indicator (1cfb8af)
  • add responseTime to the HealthCheckResponse (a0434ae)

Release 12.0.0-next.0

12.0.0-next.0 (2026-08-30)

Bug Fixes

... (truncated)

Changelog

Sourced from @​nestjs/terminus's changelog.

12.0.0 (2026-08-31)

12.0.0-next.1 (2026-08-31)

Features

  • add .cacheFor() builder (ba59644)
  • add degraded status for health indicator (1cfb8af)
  • add responseTime to the HealthCheckResponse (a0434ae)

12.0.0-next.0 (2026-08-30)

Bug Fixes

  • close the microservice client when the ping fails (8826bc6)
  • http: create a dedicated HttpService instead of resolving from DI (163bfef), closes #2667
  • microservice: stop RMQ pingCheck from asserting a queue per probe (9afc532), closes #2680
  • mongoose: ping the database instead of checking readyState (e1c6486), closes #2661
  • set shutting_down before awaiting the graceful shutdown timeout (1615c29)

Features

BREAKING CHANGES

  • the package is now ESM-only and requires Node ^20.19.0 || ^22.12.0 || >=24.0.0.

11.1.0 (2026-02-17)

Bug Fixes

  • deps: update dependency @​grpc/grpc-js to v1.12.6 (7dd0d5f)
  • deps: update dependency @​mikro-orm/nestjs to v6.1.0 (177fc8c)
  • deps: update dependency @​mikro-orm/nestjs to v6.1.1 (8e3b253)
  • deps: update dependency @​nestjs/mongoose to v11.0.1 (0af02b5)
  • deps: update dependency @​nestjs/typeorm to v11 (687a4fe)
  • deps: update dependency ioredis to v5.4.2 (47125b6)
  • deps: update dependency mongoose to v8.10.1 (4b8e133)
  • deps: update dependency mysql2 to v3.12.0 (0970ecd)
  • deps: update dependency rxjs to v7.8.2 (4cceadb)
  • deps: update dependency typeorm to v0.3.22 (b0e6662)
  • deps: update mikro-orm monorepo to v6.4.5 (5ece0f8)

... (truncated)

Commits
  • 940cb35 chore(): release v12.0.0
  • b7a086e Merge pull request #2740 from nestjs/next-major
  • 13f9ea4 refactor: enhance caching mechanism in HealthCheckAttempt
  • 1ee0e27 chore: assert reserved keys for additional data
  • 74cd4a0 chore: improve readme
  • 691e6e2 chore(): release v12.0.0-next.1
  • 0b81c39 chore: fix e2e test
  • d4f6228 refactor: mark the timeout option as deprecated
  • a0434ae feat: add responseTime to the HealthCheckResponse
  • 1cfb8af feat: add degraded status for health indicator
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @nestjs/typeorm from 11.0.3 to 12.0.1

Release notes

Sourced from @​nestjs/typeorm's releases.

Release 12.0.1

  • fix: add default condition to exports so CJS can resolve the package (01874dc)

Release 12.0.0

What's Changed

@nestjs/typeorm is now a native ES module, and the major version is aligned with the Nest 12 release line (11.0.312.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

The minimum supported Node version is now >=20.19.0.

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, CJS apps still work.

Commits

@dependabot dependabot Bot added Backend Used by the dependabot pull requests to identify PRs related to the backend. Dependencies Pull requests that update a dependency file npm Used by the dependabot pull requests to identify PRs related to npm package upgrades. labels Sep 8, 2026
@uhelm uhelm added the Do Not Merge PR should not be merged. Further analysis required. label Sep 8, 2026
@uhelm

uhelm commented Sep 8, 2026

Copy link
Copy Markdown
Collaborator

dependencies are not ready yet and can't resolve nest 12

…with 19 updates

Bumps the backend-major-updates group with 19 updates in the /sources/packages/backend directory:

| Package | From | To |
| --- | --- | --- |
| [@nestjs/axios](https://github.com/nestjs/axios) | `4.0.1` | `12.0.0` |
| [@nestjs/bull](https://github.com/nestjs/bull) | `11.0.5` | `12.0.0` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.1` | `12.0.1` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.1` | `12.0.1` |
| [@nestjs/jwt](https://github.com/nestjs/jwt) | `11.0.2` | `12.0.1` |
| [@nestjs/mapped-types](https://github.com/nestjs/mapped-types) | `2.1.1` | `12.0.0` |
| [@nestjs/microservices](https://github.com/nestjs/nest/tree/HEAD/packages/microservices) | `11.2.1` | `12.0.1` |
| [@nestjs/passport](https://github.com/nestjs/passport) | `11.0.5` | `12.0.0` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.1` | `12.0.1` |
| [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.4.7` | `12.0.1` |
| [@nestjs/terminus](https://github.com/nestjs/terminus) | `11.1.1` | `12.0.0` |
| [@nestjs/typeorm](https://github.com/nestjs/typeorm) | `11.0.3` | `12.0.1` |
| [ioredis](https://github.com/redis/ioredis) | `5.11.1` | `6.0.0` |
| [redis](https://github.com/redis/node-redis) | `5.12.1` | `6.2.1` |
| [typeorm](https://github.com/typeorm/typeorm) | `0.3.31` | `1.1.1` |
| [@nestjs/cli](https://github.com/nestjs/nest-cli) | `11.0.24` | `12.0.0` |
| [@nestjs/schematics](https://github.com/nestjs/schematics) | `11.1.0` | `12.0.1` |
| [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.2.1` | `12.0.1` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |



Updates `@nestjs/axios` from 4.0.1 to 12.0.0
- [Release notes](https://github.com/nestjs/axios/releases)
- [Commits](nestjs/axios@4.0.1...12.0.0)

Updates `@nestjs/bull` from 11.0.5 to 12.0.0
- [Release notes](https://github.com/nestjs/bull/releases)
- [Commits](https://github.com/nestjs/bull/compare/@nestjs/bull@11.0.5...@nestjs/bull@12.0.0)

Updates `@nestjs/common` from 11.2.1 to 12.0.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.0.1/packages/common)

Updates `@nestjs/core` from 11.2.1 to 12.0.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.0.1/packages/core)

Updates `@nestjs/jwt` from 11.0.2 to 12.0.1
- [Release notes](https://github.com/nestjs/jwt/releases)
- [Commits](nestjs/jwt@11.0.2...12.0.1)

Updates `@nestjs/mapped-types` from 2.1.1 to 12.0.0
- [Release notes](https://github.com/nestjs/mapped-types/releases)
- [Commits](nestjs/mapped-types@2.1.1...12.0.0)

Updates `@nestjs/microservices` from 11.2.1 to 12.0.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.0.1/packages/microservices)

Updates `@nestjs/passport` from 11.0.5 to 12.0.0
- [Release notes](https://github.com/nestjs/passport/releases)
- [Commits](nestjs/passport@11.0.5...12.0.0)

Updates `@nestjs/platform-express` from 11.2.1 to 12.0.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.0.1/packages/platform-express)

Updates `@nestjs/swagger` from 11.4.7 to 12.0.1
- [Release notes](https://github.com/nestjs/swagger/releases)
- [Commits](nestjs/swagger@11.4.7...12.0.1)

Updates `@nestjs/terminus` from 11.1.1 to 12.0.0
- [Release notes](https://github.com/nestjs/terminus/releases)
- [Changelog](https://github.com/nestjs/terminus/blob/master/CHANGELOG.md)
- [Commits](nestjs/terminus@11.1.1...12.0.0)

Updates `@nestjs/typeorm` from 11.0.3 to 12.0.1
- [Release notes](https://github.com/nestjs/typeorm/releases)
- [Commits](nestjs/typeorm@11.0.3...12.0.1)

Updates `ioredis` from 5.11.1 to 6.0.0
- [Release notes](https://github.com/redis/ioredis/releases)
- [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md)
- [Commits](redis/ioredis@v5.11.1...v6.0.0)

Updates `redis` from 5.12.1 to 6.2.1
- [Release notes](https://github.com/redis/node-redis/releases)
- [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/redis/node-redis/compare/redis@5.12.1...redis@6.2.1)

Updates `typeorm` from 0.3.31 to 1.1.1
- [Release notes](https://github.com/typeorm/typeorm/releases)
- [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md)
- [Commits](typeorm/typeorm@0.3.31...1.1.1)

Updates `@nestjs/cli` from 11.0.24 to 12.0.0
- [Release notes](https://github.com/nestjs/nest-cli/releases)
- [Commits](nestjs/nest-cli@11.0.24...12.0.0)

Updates `@nestjs/schematics` from 11.1.0 to 12.0.1
- [Release notes](https://github.com/nestjs/schematics/releases)
- [Commits](nestjs/schematics@11.1.0...12.0.1)

Updates `@nestjs/testing` from 11.2.1 to 12.0.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.0.1/packages/testing)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: "@nestjs/axios"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/bull"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/cli"
  dependency-version: 12.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/common"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/core"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/jwt"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/mapped-types"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/microservices"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/passport"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/platform-express"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/schematics"
  dependency-version: 12.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/swagger"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/terminus"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/testing"
  dependency-version: 12.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: "@nestjs/typeorm"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: ioredis
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: redis
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: typeorm
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: backend-major-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sources/packages/backend/backend-major-updates-4a15cec123 branch from 5fca893 to 885b659 Compare September 15, 2026 06:06
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backend Used by the dependabot pull requests to identify PRs related to the backend. Dependencies Pull requests that update a dependency file Do Not Merge PR should not be merged. Further analysis required. npm Used by the dependabot pull requests to identify PRs related to npm package upgrades.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant