chore(deps): Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@fastify/static	^8.2.0 → ^8.3.0			dependencies	minor
@m8a/nestjs-typegoose (source)	^12.0.0 → ^12.0.1			dependencies	patch
@nestjs/common (source)	^11.1.6 → ^11.1.24			devDependencies	patch
@nestjs/common (source)	^11.1.6 → ^11.1.24			dependencies	patch
@nestjs/core (source)	^11.1.6 → ^11.1.24			dependencies	patch
@nestjs/platform-fastify (source)	^11.1.6 → ^11.1.24			dependencies	patch
@nestjs/swagger	^11.2.0 → ^11.4.4			dependencies	minor
@rollup/pluginutils (source)	^5.1.0 → ^5.4.0			devDependencies	patch
@sentry/node (source)	^7.118.0 → ^7.120.4			dependencies	patch
@tanstack/react-query (source)	^5.90.12 → ^5.101.0			dependencies	minor
@typegoose/typegoose (source)	^12.6.0 → ^12.21.1			dependencies	minor
@​types/i18next-fs-backend	^1.1.5 → ^1.2.0			devDependencies	patch
@types/inquirer (source)	^9.0.7 → ^9.0.9			devDependencies	patch
@types/luxon (source)	^3.4.2 → ^3.7.1			devDependencies	patch
@typescript/native-preview (source)	7.0.0-dev.20260601.1 → 7.0.0-dev.20260605.1			devDependencies	patch
actions/setup-node	v6.1.0 → v6.4.0			action	minor
axios (source)	1.11.0 → 1.17.0			dependencies	minor
axios (source)	^1.11.0 → ^1.17.0			dependencies	minor
chalk	5.6.0 → 5.6.2			dependencies	patch
chalk	^5.6.0 → ^5.6.2			dependencies	patch
class-validator	^0.14.1 → ^0.15.1			dependencies	minor
date-fns	^4.1.0 → ^4.4.0			dependencies	minor
discord-api-types (source)	^0.38.22 → ^0.38.48			dependencies	patch
fastify (source)	^5.5.0 → ^5.8.5			dependencies	minor
fuse.js (source)	^7.0.0 → ^7.4.1			dependencies	minor
github/issue-labeler	v3.2 → v3.4			action	minor
handlebars (source)	^4.7.8 → ^4.7.9			dependencies	patch
i18next-fs-backend	^2.3.2 → ^2.6.6			dependencies	patch
inquirer (source)	^10.1.8 → ^10.2.2			dependencies	patch
ioredis	^5.7.0 → ^5.11.1			dependencies	minor
ioredis	5.7.0 → 5.11.1			dependencies	minor
luxon	^3.5.0 → ^3.7.2			dependencies	patch
minecraft-protocol	^1.61.0 → ^1.66.2			dependencies	minor
mongoose (source)	^8.5.2 → ^8.24.0			dependencies	minor
mongoose (source)	^8.18.0 → ^8.24.0			devDependencies	minor
motion	^12.23.25 → ^12.40.0			dependencies	minor
next (source)	^16.0.7 → ^16.2.7			dependencies	minor
node (source)	24.7.0 → 24.16.0				minor
node	24.7.0 → 24.16.0			uses-with	minor
pm2 (source)	^6.0.8 → ^6.0.14			devDependencies	patch
pnpm (source)	10.15.0 → 10.34.1			packageManager	minor
react (source)	^19.2.1 → ^19.2.7			dependencies	patch
react-dom (source)	^19.2.1 → ^19.2.7			dependencies	patch
rxjs (source)	^7.8.1 → ^7.8.2			dependencies	patch
strum	0.27.1 → 0.28.0			dependencies	minor
toad-scheduler	^3.0.1 → ^3.1.0			dependencies	patch
winit	0.29 → 0.30			dependencies	minor
zod (source)	^4.1.5 → ^4.4.3			dependencies	minor

---

Release Notes

fastify/fastify-static (@​fastify/static)

v8.3.0

Compare Source

What's Changed

• docs: use cross-platform compatible info emoji by @​Fdawgs in #​522
• docs: fix typo by @​9w in #​523
• chore(license): update date ranges; standardise style by @​Fdawgs in #​525
• chore: remove reference to simple-get by @​ilteoood in #​528
• build(deps-dev): bump @​types/node from 22.15.34 to 24.0.8 by @​dependabot[bot] in #​527
• test(types): add missing anchors by @​Fdawgs in #​529
• docs(readme): correct compatibility table by @​Fdawgs in #​531
• refactor: remove usage of deprecated request.routeConfig by @​inyourtime in #​530
• build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​532
• chore(.npmrc): ignore scripts by @​Fdawgs in #​533
• build(deps-dev): remove @​fastify/pre-commit by @​Fdawgs in #​534
• chore(index): add jsdoc comments for static code analysis by @​Fdawgs in #​535
• chore: Replace substr with slice for URL manipulation by @​Uzlopak in #​538
• refactor: small improvements by @​ilteoood in #​539
• fix: if serve: false and root is not defined, only allow sending files with absolute path by @​Uzlopak in #​540
• ci(ci): add concurrency config by @​Fdawgs in #​541

New Contributors

• @​9w made their first contribution in #​523
• @​inyourtime made their first contribution in #​530

Full Changelog: fastify/fastify-static@v8.2.0...v8.3.0

nestjs/nest (@​nestjs/common)

v11.1.24

Compare Source

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #​17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #​16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #​17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23

Compare Source

v11.1.23 (2026-05-21)

Bug fixes

• core
  • #​16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22

Compare Source

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #​16993 fix(core): inflight request injection bug #​16989 (@​kamilmysliwiec)

Enhancements

• core
  • #​16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21

Compare Source

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #​16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

v11.1.20

Compare Source

v11.1.20 (2026-05-13)

Bug fixes

• core, testing
  • #​16939 fix(core): fix deeply nested transient providers resolution (@​kamilmysliwiec)
• core
  • #​16861 fix(core): fix @​Sse losing events on complete (@​MatthiasBrehmer)
  • #​16753 fix(core): defer sse writehead until after lifecycle completes (@​jkalberer)
  • #​16782 fix(core): use strict null check for SSE message id (@​burhanharoon)
• microservices
  • #​16850 fix(microservices): ServerRMQ crashes at boot when @​MessagePattern(undefined) is combined with wildcards: true (@​lavieennoir)
• common
  • #​16845 fix(common): accept zero timestamp in parse date pipe (@​Mysh3ll)
• platform-socket.io
  • #​16742 fix(socket.io): Deduplicate disconnect listener in bindMessageHandlers (@​fru1tworld)

Enhancements

• microservices
  • #​16676 feat(microservices): add return buffers option for binary data (@​Forceres)
  • #​16826 feat(microservices): handle rmq blocked/unblocked connection events (@​thisalihassan)
• common
  • #​16902 fix(common): filetype validator buffer message (@​QusaiAlbonni)
• platform-express
  • #​16844 feat(platform-express): add defParamCharset to MulterOptions (@​starnayuta)

Dependencies

• platform-ws
  • #​16941 chore(deps): bump ws from 8.20.0 to 8.20.1 (@​dependabot[bot])

Committers: 13

• Ali Hassan (@​thisalihassan)
• Burhan Haroon⚡ (@​burhanharoon)
• Dmytro Khyzhniak (@​lavieennoir)
• Harsh Rathod (@​harshrathod50)
• IlyaCredo (@​Forceres)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Mysh3ll (@​Mysh3ll)
• @​MatthiasBrehmer
• @​QusaiAlbonni
• @​jkalberer
• @​pazaderey
• fru1tworld (@​fru1tworld)
• starnayuta (@​starnayuta)

v11.1.19

Compare Source

v11.1.19 (2026-04-13)

Bug fixes

• microservices
  • #​16762 fix(microservices): use backing field for consumer CRASH event listener (@​burhanharoon)
  • #​16764 fix(microservices): prevent stack overflow in jsonsocket.handledata() (@​kamilmysliwiec)

Committers: 2

• Burhan Haroon⚡ (@​burhanharoon)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.18

Compare Source

v11.1.18 (2026-04-03)

Bug fixes

• microservices
  • #​16675 fix(microservices): preserve packet headers in nats serializer (@​wwenrr)
• core
  • #​16683 fix(core): prevent injector hang when design:paramtypes is missing (@​Youmoo)
  • #​16637 fix(core): dependency injection edge case with moduleref.create (@​JakobStaudinger)
  • #​16686 fix(core): sanitize sse message

Dependencies

• core, platform-express, platform-fastify
  • #​16679 fix(deps): update dependency path-to-regexp to v8.4.2 (@​renovate[bot])
• platform-fastify
  • #​16623 fix(deps): update dependency fastify to v5.8.4 (@​renovate[bot])
• platform-ws
  • #​16618 chore(deps): bump ws from 8.19.0 to 8.20.0 (@​dependabot[bot])
• common
  • #​16619 chore(deps): bump file-type from 21.3.3 to 21.3.4 (@​dependabot[bot])

Committers: 6

• Ankit San (@​ankitbelal)
• Jakob Staudinger (@​JakobStaudinger)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Krishna Chaitanya (@​Krishnachaitanyakc)
• MK (@​wwenrr)
• youmoo (@​Youmoo)

v11.1.17

Compare Source

v11.1.17 (2026-03-16)

Enhancements

• microservices
  • #​16218 feat(microservices): add redis driver identification (@​vchomakov)

Bugs

• platform-fastify
  • auto-run middleware for HEAD requests as fastify redirects them to GET handlers (effectively skipping middleware execution) cbdf737 (@​kamilmysliwiec)

Dependencies

• common
  • #​16567 fix(deps): update dependency file-type to v21.3.2 (@​renovate[bot])
• platform-fastify
  • #​16533 fix(deps): update dependency fastify to v5.8.2 (@​renovate[bot])

Committers: 3

• Rohan Santhosh Kumar (@​Rohan5commit)
• Vasil Chomakov (@​vchomakov)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.16

Compare Source

v11.1.16 (2026-03-05)

Bug fixes

• microservices
  • #​16506 fix(microservices): fix double callback when isdisposed or err is truthy (@​LhonRafaat)

Dependencies

• platform-express
  • #​16507 fix(deps): update dependency multer to v2.1.1 (@​renovate[bot])

Committers: 2

• Lhon (@​LhonRafaat)
• Shahnoor Mujawar (@​shahnoormujawar)

v11.1.15

Compare Source

What's Changed

• fix(microservices): if indexOf return 0 will if will be falsy by @​cuiweixie in #​16401
• fix(microservices): introuduce max pattern depth and object complexity by @​kamilmysliwiec in #​16402
• chore(@​nestjs/core): allow override for initializeWildcardHandlersIfE… by @​StNekroman in #​16468
• chore(deps): update dependency @​fastify/middie to v9.2.0 [security] by @​renovate[bot] in #​16472
• fix(deps): update dependency multer to v2.1.0 [security] by @​renovate[bot] in #​16474

New Contributors

• @​cuiweixie made their first contribution in #​16401
• @​StNekroman made their first contribution in #​16468

Full Changelog: nestjs/nest@v11.1.14...v11.1.15

v11.1.14

Compare Source

v11.1.14 (2026-02-17)

Bug fixes

• platform-fastify
  • #​16384 fix(fastify): fastify middleware bypass cve (@​kamilmysliwiec)
• common
  • #​16307 fix: logger print invalid context when no stack trace provided (@​JulienDuf)

Enhancements

• common
  • #​16314 fix(common): change requestOrigin type (@​SpencerKaiser)

Committers: 5

• Julien Dufresne (@​JulienDuf)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Mykhailo Skrypsky (@​mixator)
• Spencer Kaiser (@​SpencerKaiser)
• 조수민 (@​suuuuuuminnnnnn)

v11.1.13

Compare Source

v11.1.13 (2026-02-03)

Bug fixes

• common
  • #​16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

• microservices
  • #​16286 feat(microservices): support per-handler qos in mqtt (@​suuuuuuminnnnnn)
  • #​16262 Feat/microservices configurable max buffer size (@​jobnow)
• common
  • #​16202 fix(common): exclude built-in primitives from strip proto keys (@​som14062005)

Dependencies

• platform-fastify
  • #​16282 fix(deps): update dependency fastify to v5.7.4 (@​renovate[bot])
• platform-express
  • #​16241 fix(deps): update dependency cors to v2.8.6 (@​renovate[bot])

Committers: 6

• Lee Donghyun (@​devizi0)
• Mykhailo Skrypsky (@​mixator)
• Neo (@​chojs23)
• Praveen Somasundaram (@​som14062005)
• Ricardo Gomes (@​jobnow)
• 조수민 (@​suuuuuuminnnnnn)

v11.1.12

Compare Source

v11.1.12 (2026-01-15)

Bug fixes

• common
  • #​16187 fix(common): regression in loading file-type under Windows OS (@​iamkanguk97)

Dependencies

• platform-ws
  • #​16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@​dependabot[bot])
• common
  • #​16155 fix(deps): update dependency file-type to v21.3.0 (@​renovate[bot])
• platform-fastify
  • #​16154 fix(deps): update dependency find-my-way to v9.4.0 (@​renovate[bot])

Committers: 3

• Antonio Tripodi (@​Tony133)
• KANGUK LEE (@​iamkanguk97)
• @​miso-kyoungminkim

v11.1.11

Compare Source

v11.1.11 (2025-12-29)

Bug fixes

• platform-fastify
  • #​16135 fix(platform-fastify): middie bypassing through decoded chars (@​kamilmysliwiec)
• core
  • #​16133 fix(core): add missing catch handler for forward-ref provider resolution (@​coti-z)

Dependencies

• platform-socket.io
  • #​16125 fix(deps): update dependency socket.io to v4.8.3 (@​renovate[bot])
  • #​16114 chore(deps): bump socket.io from 4.8.1 to 4.8.2 (@​dependabot[bot])
• platform-fastify
  • #​16130 fix(deps): update dependency @​fastify/static to v9 (@​renovate[bot])
• common
  • #​16127 chore(deps): bump file-type from 21.1.1 to 21.2.0 (@​dependabot[bot])

Committers: 3

• Himanshu Gupta (@​manureja64)
• Kamil Mysliwiec (@​kamilmysliwiec)
• coti (@​coti-z)

v11.1.10

Compare Source

v11.1.10 (2025-12-22)

Bug fixes

• core
  • #​16098 fix(core): instantiate nested transient providers in static context (@​mag123c)
  • #​16005 fix(core): resolve all providers when using resolve() with each option (@​malkovitc)
• microservices
  • #​16072 fix(microservices): fix grpc stream method return type (@​shash-hq)
• common
  • #​16077 fix(common): resolve file-type path explicitly (@​shash-hq)
  • #​16013 fix(common): Support fallbackToMimetype without buffer (@​chenjieya)

Enhancements

• common
  • #​16100 fix(common): improve error handling in FileTypeValidator (@​malkovitc)
  • #​16060 feat(common): add message property to file type validator (@​Jo-Minseok)
  • #​16079 fix: enhance ValidationPipe (@​liu-jin-yi)
• core
  • #​15721 feat(core): add Promise support for SSE handlers (@​pythonjsgo)
• microservices
  • #​15975 feat(microservices): add keepalive support for server side (@​OlegStrokan)
• common, core
  • #​15986 feat(core): add option for async logger compatibility (@​mag123c)

Dependencies

• platform-fastify
  • #​16041 fix(deps): update dependency @​fastify/cors to v11.2.0 (@​renovate[bot])
• platform-express
  • #​16002 fix(deps): update dependency express to v5.2.1 (@​renovate[bot])
• common
  • #​15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@​dependabot[bot])

Committers: 11

• Alexander (@​pythonjsgo)
• J_Coder (@​Jo-Minseok)
• Luke Son (@​KAPUIST)
• Oleh Strokan (@​OlegStrokan)
• Praveen Somasundaram (@​som14062005)
• Shashank (@​shash-hq)
• @​chenjieya
• @​giorgikakauridze
• @​mag123c
• chernomortsev evgeny (@​malkovitc)
• liu-jin-yi (@​liu-jin-yi)

v11.1.9

Compare Source

v11.1.9 (2025-11-14)

Bug fixes

• core
  • #​15865 fix(core): make get() throw for implicitly request-scoped trees (@​JoeNutt)

Enhancements

• common
  • #​15863 feat(common): add method options to @​sse decorator (@​TomerSteinberg)

Dependencies

• platform-fastify
  • #​15899 chore(deps): bump fastify from 5.6.1 to 5.6.2 (@​dependabot[bot])

Committers: 4

• Rami (@​JoeNutt)
• Rhynel Algopera (@​dev-rhynel)
• Tomer Steinberg (@​TomerSteinberg)
• WuMingDao (@​WuMingDao)

v11.1.8

Compare Source

v11.1.7

Compare Source

nestjs/swagger (@​nestjs/swagger)

v11.4.4

Compare Source

11.4.4 (2026-05-21)

Bug fixes

• #​3930 fix: top-level nullable with discriminator issue (@​kamilmysliwiec)

Enhancements

• #​3921 feat(swagger): add summary field to Tag Object (OpenAPI 3.2) (@​frbuceta)
• #​3924 feat(swagger): warn when @​ApiTags receives hierarchy fields (@​frbuceta)
• #​3925 fix(swagger): type Tag Object kind as a free-form string (@​frbuceta)

Committers: 4

• Alexander Scholz (@​LucidityDesign)
• Francisco Buceta (@​frbuceta)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Natanael dos Santos Feitosa (@​natanfeitosa)

v11.4.3

Compare Source

11.4.3 (2026-05-14)

Bug fixes

• #​3910 fix(swagger): support const enum query params (@​yudin-s)
• #​3911 fix(swagger-module): return reply from async route handlers (@​tibohaffner)
• #​3883 fix(response-object-factory): preserve example/examples for built-in scalar response types (@​yogeshwaran-c)
• #​3882 fix(swagger-types-mapper): place multipleOf inside parameter schema (@​yogeshwaran-c)

Enhancements

• #​3885 feat(plugin): auto-generate enum metadata for string and number literal union types (@​y-hsgw)
• #​3604 feat: added api-include-endpoint (@​TomSpott)

Dependencies

• #​3906 fix(deps): update dependency swagger-ui-dist to v5.32.6 (@​renovate[bot])

Committers: 6

• Serge Yudin (@​yudin-s)
• Thibault Haffner (@​tibohaffner)
• Yogeshwaran C (@​yogeshwaran-c)
• Yukihiro Hasegawa (@​y-hsgw)
• @​TomSpott
• @​kyungseopk1m

v11.4.2

Compare Source

v11.4.1

Compare Source

v11.4.0

Compare Source

11.4.0 (2026-04-22)

Features

• #​3868 feat(plugin): auto-mark optional @​Query parameters as required: false (@​yogeshwaran-c)
• #​3725 feat(swagger): add OpenAPI 3.2 hierarchical tags support (@​apt-bh)

Bug fixes

• #​3874 fix(document-builder): accept multi-digit OpenAPI version segments (@​yogeshwaran-c)
• #​3873 fix(plugin): strip regex delimiters and flags from @​Matches patterns (@​yogeshwaran-c)
• #​3870 fix(decorators): forward all OpenAPI parameter fields in @​ApiHeader (@​yogeshwaran-c)
• #​3872 fix(plugin): emit @​throws descriptions as proper string literals (@​yogeshwaran-c)
• #​3782 fix(schema): preserve example metadata for non-body params with named types (@​maruthang)
• #​3761 fix(plugin): support boolean literal types and boolean enum values (@​lucreiss)

Enhancements

• #​3865 feat(schema-object-factory): include class name chain in circular dependency errors (@​yogeshwaran-c)

Committers: 4

• Lu R A (@​lucreiss)
• Maruthan G (@​maruthang)
• Yogeshwaran C (@​yogeshwaran-c)
• @​apt-bh

v11.3.2

Compare Source

v11.3.1

Compare Source

v11.3.0

Compare Source

11.3.0 (2026-04-15)

Bug fixes

• #​3826 fix: support nullable field in @​ApiResponse decorator (@​Nedunchezhiyan-M)
• #​3784 fix(schema): include type field when nullable is used with

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 12pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
statsify	Ignored	Preview	Jun 5, 2026 11:06am

[vercel]

Deployment failed with the following error:

Creating the Deployment Timed Out.

[vercel]

Deployment failed with the following error:

Invalid request: `attribution.gitUser` should NOT have additional property `isBot`.