Skip to content

build(deps): Bump the production group in /services with 15 updates#720

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/services/production-b6f96a4a0f
Open

build(deps): Bump the production group in /services with 15 updates#720
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/services/production-b6f96a4a0f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the production group in /services with 15 updates:

Package From To
@mean-stream/nestx 0.14.0 0.15.0
@nestjs/common 11.1.17 11.1.19
@nestjs/core 11.1.18 11.1.19
@nestjs/event-emitter 3.0.1 3.1.0
@nestjs/platform-express 11.1.17 11.1.19
@nestjs/schedule 6.1.1 6.1.3
@nestjs/swagger 11.2.6 11.4.2
@nestjs/websockets 11.1.17 11.1.19
@sentry/nestjs 10.46.0 10.51.0
@sentry/node 10.46.0 10.51.0
axios 1.15.0 1.15.2
dockerode 4.0.10 5.0.0
jsdom 29.0.1 29.1.1
mongoose 9.3.3 9.6.1
openai 6.33.0 6.35.0

Updates @mean-stream/nestx from 0.14.0 to 0.15.0

Updates @nestjs/common from 11.1.17 to 11.1.19

Release notes

Sourced from @​nestjs/common's releases.

v11.1.19 (2026-04-13)

Bug fixes

Committers: 2

v11.1.18 (2026-04-03)

Bug fixes

Dependencies

Committers: 6

Commits
  • 6730995 chore(release): publish v11.1.19 release
  • 3c1cc5f chore(release): publish v11.1.18 release
  • a39e345 refactor(common): change console logger helpers to protected
  • 34f0f28 chore(deps): bump file-type from 21.3.3 to 21.3.4
  • 0e96b0a chore(deps): bump file-type from 21.3.2 to 21.3.3
  • 5a05f52 chore: update readme
  • See full diff in compare view

Updates @nestjs/core from 11.1.18 to 11.1.19

Release notes

Sourced from @​nestjs/core's releases.

v11.1.19 (2026-04-13)

Bug fixes

Committers: 2

Commits

Updates @nestjs/event-emitter from 3.0.1 to 3.1.0

Release notes

Sourced from @​nestjs/event-emitter's releases.

Release 3.1.0

What's Changed

New Contributors

Full Changelog: nestjs/event-emitter@3.0.1...3.1.0

Commits
  • 35b9313 chore(): release v3.1.0
  • 53d3b82 Merge pull request #1708 from nestjs/renovate/cimg-node-24.x
  • eb7bde2 Merge pull request #1715 from kyungseopk1m/feat/inherit-request-context-id
  • c06defe feat(loader): inherit request context id in request-scoped listeners
  • f711eb5 chore(deps): update dependency @​commitlint/cli to v20.5.2 (#1714)
  • e684d68 chore(deps): update dependency release-it to v20.0.1 (#1713)
  • 85f0265 chore(deps): update dependency vite to v8.0.10 (#1712)
  • 770cc24 chore(deps): update dependency vitest to v4.1.5 (#1711)
  • 85bb425 chore(deps): update dependency oxlint to v1.61.0 (#1710)
  • 6be695c chore(deps): update dependency vite to v8.0.9 (#1709)
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.17 to 11.1.19

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.19 (2026-04-13)

Bug fixes

Committers: 2

v11.1.18 (2026-04-03)

Bug fixes

Dependencies

Committers: 6

Commits
  • 6730995 chore(release): publish v11.1.19 release
  • 3c1cc5f chore(release): publish v11.1.18 release
  • 0ca5440 Merge pull request #16627 from ankitbelal/refactor/centralize-headers-and-par...
  • 25d4fde fix(deps): update dependency path-to-regexp to v8.4.2
  • 5c0b11e fix(deps): update dependency path-to-regexp to v8.4.1
  • d0a9dc9 fix(deps): update dependency path-to-regexp to v8.4.0
  • 1a14884 refactor(core): centralize headers for streamable file responses
  • 5a05f52 chore: update readme
  • See full diff in compare view

Updates @nestjs/schedule from 6.1.1 to 6.1.3

Release notes

Sourced from @​nestjs/schedule's releases.

6.1.3

What's Changed

Full Changelog: nestjs/schedule@6.1.2...6.1.3

Release 6.1.2

  • Merge pull request #2247 from kyungseopk1m/feat/cron-initial-delay (a57ce2c)
  • chore(deps): update dependency prettier to v3.8.3 (#2248) (bb3490d)
  • feat(cron): add initialDelay option to defer first job execution (1c5677f)
  • Merge pull request #2245 from nestjs/renovate/nest-monorepo (59046bd)
  • Merge pull request #2246 from nestjs/renovate/oxlint-monorepo (be4eee3)
  • chore(deps): update dependency oxlint to v1.60.0 (32a9ce2)
  • chore(deps): update nest monorepo to v11.1.19 (7d3844f)
  • chore: migrate to oxlint, vitest, ts6 (29de71b)
  • chore(deps): update dependency globals to v17.5.0 (#2244) (6c62cca)
  • chore(deps): update dependency sinon to v21.1.2 (#2243) (ee3b31a)
  • chore(deps): update dependency sinon to v21.1.1 (#2241) (eba9799)
  • Merge pull request #2242 from nestjs/renovate/prettier-3.x (c3ad0f7)
  • chore(deps): update dependency prettier to v3.8.2 (798e2a9)
  • Merge pull request #2199 from nestjs/renovate/cimg-node-24.x (a05354a)
  • chore(deps): update dependency typescript-eslint to v8.58.1 (#2240) (0367ac1)
  • chore(deps): update dependency eslint to v10.2.0 (#2239) (fa93e06)
  • chore(deps): update nest monorepo to v11.1.18 (#2238) (8cd4c02)
  • chore(deps): update dependency @​types/node to v24.12.2 (#2237) (01482df)
  • chore(deps): update dependency @​types/sinon to v21.0.1 (#2236) (f05b5bd)
  • chore(deps): update dependency ts-jest to v29.4.9 (#2235) (af545e6)
  • chore(deps): update dependency typescript-eslint to v8.58.0 (#2233) (4dad22a)
  • chore(deps): update node.js to v24.14.1 (28db9bc)
  • chore(deps): update dependency eslint to v10.1.0 (#2232) (413f390)
  • chore(deps): update nest monorepo to v11.1.17 (#2230) (46c2bc5)
  • chore(deps): update dependency typescript-eslint to v8.57.1 (#2231) (8fd063b)
  • chore(deps): update dependency sinon to v21.0.3 (#2229) (1671ad9)
  • chore(deps): update commitlint monorepo to v20.5.0 (#2228) (2ecd2f1)
  • chore(deps): update dependency lint-staged to v16.4.0 (#2227) (aa0de01)
  • chore(deps): update commitlint monorepo to v20.4.4 (#2226) (75034fe)
  • chore(deps): update dependency lint-staged to v16.3.3 (#2225) (f1c7d31)
  • chore(deps): update dependency jest to v30.3.0 (#2224) (1a208d4)
  • chore(deps): update dependency typescript-eslint to v8.57.0 (#2223) (60dd2c9)
  • chore(deps): update dependency eslint to v10.0.3 (#2221) (791b6ba)
  • chore(deps): update dependency @​eslint/eslintrc to v3.3.5 (#2220) (0da1ca7)
  • chore(deps): update dependency @​types/node to v24.12.0 (#2219) (934a93e)
  • chore(deps): update nest monorepo to v11.1.16 (#2218) (5f44e9b)
  • chore(deps): update dependency sinon to v21.0.2 (#2217) (b807746)
  • chore(deps): update dependency lint-staged to v16.3.2 (#2216) (4ca32bd)
  • chore(deps): update commitlint monorepo to v20.4.3 (#2215) (d3ceb76)
  • chore(deps): update nest monorepo to v11.1.15 (#2214) (b084ffc)
  • chore(deps): update dependency lint-staged to v16.3.1 (#2213) (8a201b2)
  • chore(deps): update dependency globals to v17.4.0 (#2212) (6f61793)
  • chore(deps): update dependency lint-staged to v16.3.0 (#2211) (aa9213a)

... (truncated)

Commits
  • 059f196 Merge pull request #2249 from nestjs/renovate/release-it-20.x
  • 557730e Merge pull request #2251 from kyungseopk1m/feat/cron-initial-delay-v2
  • 14f5b80 feat(cron): add initialDelay option to defer first job execution
  • 536367d chore(deps): update dependency release-it to v20
  • 57e2861 Merge pull request #2250 from nestjs/revert-2247-feat/cron-initial-delay
  • e08f457 Revert "feat(cron): add initialDelay option to defer first job execution"
  • 3198abe chore(): release v6.1.2
  • a57ce2c Merge pull request #2247 from kyungseopk1m/feat/cron-initial-delay
  • bb3490d chore(deps): update dependency prettier to v3.8.3 (#2248)
  • 1c5677f feat(cron): add initialDelay option to defer first job execution
  • Additional commits viewable in compare view

Updates @nestjs/swagger from 11.2.6 to 11.4.2

Release notes

Sourced from @​nestjs/swagger's releases.

Release 11.4.2

11.4.2 (2026-04-27)

Bug fixes

  • #3867 fix(plugin): keep auto-inferred default response when only error Api*Response decorators are present (@​PeterTheOne)
  • #3876 fix(plugin): handle IsIn enum inference when type falls back to Object (@​y-hsgw)

Committers: 2

Release 11.4.1

11.4.1 (2026-04-22)

Bug fixes

Committers: 1

Release 11.4.0

11.4.0 (2026-04-22)

Features

Bug fixes

Enhancements

  • #3865 feat(schema-object-factory): include class name chain in circular dependency errors (@​yogeshwaran-c)

Committers: 4

Release 11.3.2

What's Changed

New Contributors

... (truncated)

Commits
  • 3f58449 chore(): release v11.4.2
  • b0a35f3 Merge pull request #3867 from PeterTheOne/fix-error-only-response-decorators-...
  • f01f6aa refactor(plugin): make isSuccessOrRedirectApiResponseArg a private method
  • 7999f78 test: inspect @​ApiResponse status arg and extend fixture with redirect/500 cases
  • 977a139 fix(plugin): keep auto-inferred default response when only error Api*Response...
  • a51cf09 Merge pull request #3876 from y-hsgw/fix/plugin-string-literal-union-type
  • a8acf7a chore(deps): update dependency @​commitlint/cli to v20.5.2 (#3878)
  • e054058 chore(deps): update dependency release-it to v20.0.1 (#3877)
  • 9a3745b fix(plugin): enhance enum handling for literal union types in schema generation
  • 6e1bb8f Merge pull request #3875 from nestjs/renovate/vite-8.x-lockfile
  • Additional commits viewable in compare view

Updates @nestjs/websockets from 11.1.17 to 11.1.19

Release notes

Sourced from @​nestjs/websockets's releases.

v11.1.19 (2026-04-13)

Bug fixes

Committers: 2

v11.1.18 (2026-04-03)

Bug fixes

Dependencies

Committers: 6

Commits

Updates @sentry/nestjs from 10.46.0 to 10.51.0

Release notes

Sourced from @​sentry/nestjs's releases.

10.51.0

Important Changes

  • feat(cloudflare): Add trace propagation for RPC method calls (#20343)

    Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects. This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

    // Worker
export default Sentry.withSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  handler,
);
// Durable Object
export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
env => ({
dsn: env.SENTRY_DSN,
enableRpcTracePropagation: true,
}),
MyDurableObjectBase,
);

  • feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

    To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options. Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

    // instrument.mjs (or instrument.ts)
import * as Sentry from '@sentry/hono/node';
Sentry.init({
dsn: 'DSN',
tracesSampleRate: 1.0,
});

  • feat(nitro): Add @sentry/nitro SDK (#19224)

    A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig. Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

... (truncated)

Changelog

Sourced from @​sentry/nestjs's changelog.

10.51.0

Important Changes

  • feat(cloudflare): Add trace propagation for RPC method calls (#20343)

    Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects. This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

    // Worker
export default Sentry.withSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  handler,
);
// Durable Object
export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
env => ({
dsn: env.SENTRY_DSN,
enableRpcTracePropagation: true,
}),
MyDurableObjectBase,
);

  • feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

    To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options. Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

    // instrument.mjs (or instrument.ts)
import * as Sentry from '@sentry/hono/node';
Sentry.init({
dsn: 'DSN',
tracesSampleRate: 1.0,
});

  • feat(nitro): Add @sentry/nitro SDK (#19224)

    A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig. Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

... (truncated)

Commits
  • dc0b839 release: 10.51.0
  • b3cabee Merge pull request #20599 from getsentry/prepare-release/10.51.0
  • 3be99a9 meta(changelog): Update changelog for 10.51.0
  • bea1aad test(browser): Unflake some more tests (#20591)
  • 50aa085 test(node): Unflake postgres tests (#20593)
  • 1166839 fix(hono): Distinguish .use() middleware in sub-apps from .all() handlers...
  • 217ad4a test(node): Fix flaky ANR test (#20592)
  • 91ffb3f test(node): Fix flaky worker thread integration test (#20588)
  • c4e3902 chore(ci): Do not report flaky test issues if we cannot find a test name (#20...
  • c0005cd test(node): Update timeout for cron integration tests (#20586)
  • Additional commits viewable in compare view

Updates @sentry/node from 10.46.0 to 10.51.0

Release notes

Sourced from @​sentry/node's releases.

10.51.0

Important Changes

  • feat(cloudflare): Add trace propagation for RPC method calls (#20343)

    Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects. This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

    // Worker
export default Sentry.withSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  handler,
);
// Durable Object
export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
env => ({
dsn: env.SENTRY_DSN,
enableRpcTracePropagation: true,
}),
MyDurableObjectBase,
);

  • feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

    To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options. Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

    // instrument.mjs (or instrument.ts)
import * as Sentry from '@sentry/hono/node';
Sentry.init({
dsn: 'DSN',
tracesSampleRate: 1.0,
});

  • feat(nitro): Add @sentry/nitro SDK (#19224)

    A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig. Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

... (truncated)

Changelog

Sourced from @​sentry/node's changelog.

10.51.0

Important Changes

  • feat(cloudflare): Add trace propagation for RPC method calls (#20343)

    Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects. This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

    // Worker
export default Sentry.withSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  handler,
);
// Durable Object
export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
env => ({
dsn: env.SENTRY_DSN,
enableRpcTracePropagation: true,
}),
MyDurableObjectBase,
);

  • feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#20497)

    To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options. Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

    // instrument.mjs (or instrument.ts)
import * as Sentry from '@sentry/hono/node';
Sentry.init({
dsn: 'DSN',
tracesSampleRate: 1.0,
});

  • feat(nitro): Add @sentry/nitro SDK (#19224)

    A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig. Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes

... (truncated)

Commits
  • dc0b839 release: 10.51.0
  • b3cabee Merge pull request #20599 from getsentry/prepare-release/10.51.0
  • 3be99a9 meta(changelog): Update changelog for 10.51.0
  • bea1aad test(browser): Unflake some more tests (#20591)
  • 50aa085 test(node): Unflake postgres tests (#20593)
  • 1166839 fix(hono): Distinguish .use() middleware in sub-apps from .all() handlers...
  • 217ad4a test(node): Fix flaky ANR test (#20592)
  • 91ffb3f test(node): Fix flaky worker thread integration test (#20588)
  • c4e3902 chore(ci): Do not report flaky test issues if we cannot find a test name (#20...
  • c0005cd test(node): Update timeout for cron integration tests (#20586)
  • Additional commits viewable in compare view

Updates axios from 1.15.0 to 1.15.2

Release notes

Sourced from axios's releases.

v1.15.2

This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in allowedSocketPaths allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.

🔒 Security Fixes

  • Prototype Pollution Hardening (HTTP Adapter): Hardened the Node HTTP adapter and resolveConfig/mergeConfig/validator paths to read only own properties and use null-prototype config objects, preventing polluted auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser from influencing requests. (#10779)
  • SSRF via socketPath: Rejects non-string socketPath values and adds an opt-in allowedSocketPaths config option to restrict permitted Unix domain socket paths, returning AxiosError ERR_BAD_OPTION_VALUE on mismatch. (#10777)
  • Supply-chain Hardening: Added .npmrc with ignore-scripts=true, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded SECURITY.md/THREATMODEL.md with provenance verification (npm audit signatures), 60-day resolution policy, and maintainer incident-response runbook. (#10776)

🚀 New Features

  • allowedSocketPaths Config Option: New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (#10777)

🐛 Bug Fixes

  • Keep-alive Socket Memory Leak: Installs a single per-socket error listener tracking the active request via kAxiosSocketListener/kAxiosCurrentReq, eliminating per-request listener accumulation, MaxListenersExceededWarning, and linear heap growth under concurrent or long-running keep-alive workloads (fixes #10780). (#10788)

🔧 Maintenance & Chores

  • Changelog: Updated CHANGELOG.md with v1.15.1 release notes. (#10781)

Full Changelog

v1.15.1

This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.

🔒 Security Fixes

  • Header Injection Hardening: Tightened validation and sanitisation across request header construction to close the header-injection attack surface. (#10749)
  • CRLF Stripping in Multipart Headers: Correctly strips CR/LF from multipart header values to prevent injection via field names and filenames. (#10758)
  • Prototype Pollution / Auth Bypass: Replaced unsafe in checks with hasOwnProperty to prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (#10761, #10760)
  • withXSRFToken Truthy Bypass: Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (#10762)
  • maxBodyLength With Zero Redirects: Enforces maxBodyLength even when maxRedirects is set to 0, closing a bypass path for oversized request bodies. (#10753)
  • Streamed Response maxContentLength Bypass: Applies maxContentLength to streamed responses that previously bypassed the cap. (#10754)
  • Follow-up CVE Completion: Completes an earlier incomplete CVE fix to fully close the regression window. (#10755)

🚀 New Features

  • AI-Based Docs Translations: Initial scaffold for AI-assisted translations of the documentation site. (#10705)
  • Location Request Header Type: Adds Location to CommonRequestHeadersList for accurate typing of redirect-aware requests. (#7528)

🐛 Bug Fixes

  • FormData Handling: Removes Content-Type when no boundary is present on FormData fetch requests, supports multi-select fields, cancels request.body instead of the source stream on fetch abort, and fixes a recursion bug in form-data serialisation. (#7314, #10676, #10702, #10726)
  • HTTP Adapter: Handles socket-only request errors without leaking keep-alive listeners. (#10576)
  • Progress Events: Clamps loaded to total for computable upload/download progress events. (#7458)
  • Types: Aligns runWhen type with the runtime behaviour in InterceptorManager and makes response header keys case-insensitive. (#7529, #10677)
  • buildFullPath: Uses strict equality in the base/relative URL check. (#7252)
  • AxiosURLSearchParams Regex: Improves the regex used for param serialisation to avoid edge-case mismatches. (#10736)
  • Resilient Value Parsing: Parses out header/config values instead of throwing on malformed input. (#10687)

... (truncated)

Changelog

Sourced from axios's changelog.

v1.15.2 - April 21, 2026

This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in allowedSocketPaths allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.

🔒 Security Fixes

  • Prototype Pollution Hardening (HTTP Adapter): Hardened the Node HTTP adapter and resolveConfig/mergeConfig/validator paths to read only own properties and use null-prototype config objects, preventing polluted auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser from influencing requests. (#10779)
  • SSRF via socketPath: Rejects non-string socketPath values and adds an opt-in allowedSocketPaths config option to restrict permitted Unix domain socket paths, returning AxiosError ERR_BAD_OPTION_VALUE on mismatch. (#10777)
  • Supply-chain Hardening: Added .npmrc with ignore-scripts=true, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded SECURITY.md/THREATMODEL.md with provenance verification (npm audit signatures), 60-day resolution policy, and maintainer incident-response runbook. (#10776)

🚀 New Features

  • allowedSocketPaths Config Option: New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (

@dependabot
build(deps): Bump the production group in /services with 15 updates
36d498c 
Bumps the production group in /services with 15 updates:

| Package | From | To |
| --- | --- | --- |
| @mean-stream/nestx | `0.14.0` | `0.15.0` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.17` | `11.1.19` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.18` | `11.1.19` |
| [@nestjs/event-emitter](https://github.com/nestjs/event-emitter) | `3.0.1` | `3.1.0` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.17` | `11.1.19` |
| [@nestjs/schedule](https://github.com/nestjs/schedule) | `6.1.1` | `6.1.3` |
| [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.2.6` | `11.4.2` |
| [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `11.1.17` | `11.1.19` |
| [@sentry/nestjs](https://github.com/getsentry/sentry-javascript) | `10.46.0` | `10.51.0` |
| [@sentry/node](https://github.com/getsentry/sentry-javascript) | `10.46.0` | `10.51.0` |
| [axios](https://github.com/axios/axios) | `1.15.0` | `1.15.2` |
| [dockerode](https://github.com/apocas/dockerode) | `4.0.10` | `5.0.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.0.1` | `29.1.1` |
| [mongoose](https://github.com/Automattic/mongoose) | `9.3.3` | `9.6.1` |
| [openai](https://github.com/openai/openai-node) | `6.33.0` | `6.35.0` |


Updates `@mean-stream/nestx` from 0.14.0 to 0.15.0

Updates `@nestjs/common` from 11.1.17 to 11.1.19
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/common)

Updates `@nestjs/core` from 11.1.18 to 11.1.19
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/core)

Updates `@nestjs/event-emitter` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/nestjs/event-emitter/releases)
- [Commits](nestjs/event-emitter@3.0.1...3.1.0)

Updates `@nestjs/platform-express` from 11.1.17 to 11.1.19
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/platform-express)

Updates `@nestjs/schedule` from 6.1.1 to 6.1.3
- [Release notes](https://github.com/nestjs/schedule/releases)
- [Commits](nestjs/schedule@6.1.1...6.1.3)

Updates `@nestjs/swagger` from 11.2.6 to 11.4.2
- [Release notes](https://github.com/nestjs/swagger/releases)
- [Commits](nestjs/swagger@11.2.6...11.4.2)

Updates `@nestjs/websockets` from 11.1.17 to 11.1.19
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.19/packages/websockets)

Updates `@sentry/nestjs` from 10.46.0 to 10.51.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.46.0...10.51.0)

Updates `@sentry/node` from 10.46.0 to 10.51.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.46.0...10.51.0)

Updates `axios` from 1.15.0 to 1.15.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.15.0...v1.15.2)

Updates `dockerode` from 4.0.10 to 5.0.0
- [Release notes](https://github.com/apocas/dockerode/releases)
- [Commits](apocas/dockerode@v4.0.10...v5.0.0)

Updates `jsdom` from 29.0.1 to 29.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.0.1...v29.1.1)

Updates `mongoose` from 9.3.3 to 9.6.1
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@9.3.3...9.6.1)

Updates `openai` from 6.33.0 to 6.35.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v6.33.0...v6.35.0)

---
updated-dependencies:
- dependency-name: "@mean-stream/nestx"
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@nestjs/event-emitter"
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@nestjs/schedule"
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@nestjs/swagger"
  dependency-version: 11.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@nestjs/websockets"
  dependency-version: 11.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@sentry/nestjs"
  dependency-version: 10.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@sentry/node"
  dependency-version: 10.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: axios
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: dockerode
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production
- dependency-name: jsdom
  dependency-version: 29.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: mongoose
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: openai
  dependency-version: 6.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants