[Snyk] Upgrade: @nestjs/common, @nestjs/core, @nestjs/platform-express #24

AbdulHakkam · 2024-05-10T17:10:08Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@nestjs/common from 10.0.1 to 10.3.8	28 versions ahead of your current version	21 days ago on 2024-04-19
@nestjs/core from 10.0.1 to 10.3.8	28 versions ahead of your current version	21 days ago on 2024-04-19
@nestjs/platform-express from 10.0.1 to 10.3.8	28 versions ahead of your current version	21 days ago on 2024-04-19

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Open Redirect SNYK-JS-EXPRESS-6474509	519/1000 Why? Has a fix available, CVSS 6.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @nestjs/common

10.3.8 - 2024-04-19
v10.3.8
10.3.7 - 2024-03-28
v10.3.7
10.3.6 - 2024-03-27
v10.3.6 (2024-03-27)

Bug fixes
- microservices
  - #13367 Revert "fix(microservices): fix redundant code to emit error" (@ kamilmysliwiec)
- core
  - #13366 fix(core): break reference chain to instance object (@ breeeew)
Dependencies
- Other
  - #13362 chore(deps-dev): bump @ grpc/proto-loader from 0.7.10 to 0.7.11 (@ dependabot[bot])
  - #13358 chore(deps-dev): bump @ typescript-eslint/eslint-plugin from 7.3.1 to 7.4.0 (@ dependabot[bot])
  - #13361 chore(deps-dev): bump mocha from 10.3.0 to 10.4.0 (@ dependabot[bot])
  - #13363 chore(deps-dev): bump @ grpc/grpc-js from 1.10.3 to 1.10.4 (@ dependabot[bot])
  - #13364 chore(deps-dev): bump mysql2 from 3.9.2 to 3.9.3 (@ dependabot[bot])
  - #13355 chore(deps-dev): bump @ apollo/server from 4.10.1 to 4.10.2 (@ dependabot[bot])
  - #13359 chore(deps-dev): bump @ typescript-eslint/parser from 7.3.1 to 7.4.0 (@ dependabot[bot])
  - #13343 chore(deps-dev): bump core-js from 3.36.0 to 3.36.1 (@ dependabot[bot])
  - #13344 chore(deps-dev): bump @ commitlint/cli from 19.2.0 to 19.2.1 (@ dependabot[bot])
  - #13347 chore(deps-dev): bump typescript from 5.4.2 to 5.4.3 (@ dependabot[bot])
  - #13345 chore(deps-dev): bump @ types/node from 20.11.29 to 20.11.30 (@ dependabot[bot])
  - #13348 chore(deps-dev): bump @ fastify/multipart from 8.1.0 to 8.2.0 (@ dependabot[bot])
  - #13352 chore(deps-dev): bump mongoose from 8.2.2 to 8.2.3 (@ dependabot[bot])
- platform-express
  - #13357 chore(deps): bump express from 4.19.1 to 4.19.2 (@ dependabot[bot])
  - #13349 chore(deps): bump express from 4.18.3 to 4.19.1 (@ dependabot[bot])
Committers: 2
- Abdulla Bayramov (@ breeeew)
- Kamil Mysliwiec (@ kamilmysliwiec)
10.3.5 - 2024-03-22
v10.3.5
10.3.4 - 2024-03-18
Read more
10.3.3 - 2024-02-12
v10.3.3
10.3.2 - 2024-02-07
v10.3.2 (2024-02-07)

Bug fixes
- microservices
  - #12974 fix(microservices): send rmq nack without matching message handler (@ toxol)
  - #13084 fix: #13077 KafkaJs typing consistency (@ edeesis)
  - #13151 fix(packages/microservices): pass inboxPrefix as argument to createInbox (@ leandrogenas)
- common, core
  - #13000 fix(core,common): 🐛 missing registration handling of SEARCH http verb (@ doronguttman)
Enhancements
- core, platform-express, platform-fastify
  - #12955 feat: Implement getHeader and appendHeader methods in adapters (@ josesilveiraa07)
- microservices
  - #13105 feat(microservices): add type for rmq connection options (@ Deniks)
- platform-fastify
  - #13152 fix: allow @ fastify/static v7 (@ alexfriesen)
Dependencies
- common, core, microservices, websockets
  - #12943 fix(deps): update dependency reflect-metadata to v0.2.1 (@ renovate[bot])
- Other
  - #13101 chore(deps-dev): bump @ commitlint/config-angular from 18.5.0 to 18.6.0 (@ dependabot[bot])
  - #13173 chore(deps-dev): bump @ grpc/grpc-js from 1.9.14 to 1.10.0 (@ dependabot[bot])
  - #13162 chore(deps-dev): bump prettier from 3.2.4 to 3.2.5 (@ dependabot[bot])
  - #13166 chore(deps): bump fast-json-stringify from 5.11.1 to 5.12.0 (@ dependabot[bot])
  - #13170 chore(deps-dev): bump @ typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0 (@ dependabot[bot])
  - #13167 chore(deps-dev): bump redis from 4.6.12 to 4.6.13 (@ dependabot[bot])
  - #13168 chore(deps-dev): bump artillery from 2.0.4 to 2.0.5 (@ dependabot[bot])
  - #13171 chore(deps-dev): bump lint-staged from 15.2.1 to 15.2.2 (@ dependabot[bot])
  - #13172 chore(deps-dev): bump @ typescript-eslint/parser from 6.20.0 to 6.21.0 (@ dependabot[bot])
  - #13129 chore(deps-dev): bump @ typescript-eslint/eslint-plugin from 6.19.1 to 6.20.0 (@ dependabot[bot])
  - #13134 chore(deps): update mysql docker tag to v8.3.0 (@ renovate[bot])
  - #13142 fix(deps): update dependency mysql2 to v3.9.1 (@ renovate[bot])
  - #13149 chore(deps-dev): bump lint-staged from 15.2.0 to 15.2.1 (@ dependabot[bot])
  - #13154 chore(deps-dev): bump @ fastify/static from 6.12.0 to 7.0.0 (@ dependabot[bot])
  - #13155 chore(deps-dev): bump husky from 9.0.7 to 9.0.10 (@ dependabot[bot])
  - #13156 chore(deps-dev): bump @ types/node from 20.11.13 to 20.11.16 (@ dependabot[bot])
  - #13157 chore(deps): bump fast-json-stringify from 5.10.0 to 5.11.1 (@ dependabot[bot])
  - #13114 chore(deps): update dependency eslint-plugin-prettier to v5.1.3 (@ renovate[bot])
  - #13117 chore(deps): update dependency ts-jest to v29.1.2 (@ renovate[bot])
  - #13118 fix(deps): update dependency @ graphql-tools/utils to v10.0.13 (@ renovate[bot])
  - #13120 fix(deps): update dependency class-validator to v0.14.1 (@ renovate[bot])
  - #13127 chore(deps-dev): bump mysql2 from 3.9.0 to 3.9.1 (@ dependabot[bot])
  - #13130 chore(deps-dev): bump @ typescript-eslint/parser from 6.19.1 to 6.20.0 (@ dependabot[bot])
  - #13131 chore(deps-dev): bump husky from 9.0.6 to 9.0.7 (@ dependabot[bot])
  - #13137 chore(deps-dev): bump @ types/node from 20.11.10 to 20.11.13 (@ dependabot[bot])
  - #13138 fix(deps): update dependency @ nestjs/cache-manager to v2.2.0 (@ renovate[bot])
  - #13139 fix(deps): update dependency @ nestjs/swagger to v7.2.0 (@ renovate[bot])
  - #13140 fix(deps): update dependency cache-manager to v5.4.0 (@ renovate[bot])
  - #13141 fix(deps): update dependency dotenv to v16.4.1 (@ renovate[bot])
  - #13124 chore(deps): update dependency @ nestjs/cli to v10.3.0 (@ renovate[bot])
  - #13085 chore(deps-dev): bump mqtt from 5.3.4 to 5.3.5 (@ dependabot[bot])
  - #13111 chore(deps-dev): bump mysql2 from 3.8.0 to 3.9.0 (@ dependabot[bot])
  - #13113 chore(deps): update babel monorepo to v7.23.9 (@ renovate[bot])
  - #13116 chore(deps): update dependency nodemon to v3.0.3 (@ renovate[bot])
  - #13119 fix(deps): update dependency @ grpc/grpc-js to v1.9.14 (@ renovate[bot])
  - #13121 fix(deps): update dependency socket.io to v4.7.4 (@ renovate[bot])
  - #13086 chore(deps-dev): bump cache-manager from 5.3.2 to 5.4.0 (@ dependabot[bot])
  - #13097 chore(deps-dev): bump mongoose from 8.1.0 to 8.1.1 (@ dependabot[bot])
  - #13102 chore(deps-dev): bump husky from 8.0.3 to 9.0.6 (@ dependabot[bot])
  - #13103 chore(deps-dev): bump @ commitlint/cli from 18.4.4 to 18.6.0 (@ dependabot[bot])
  - #13112 chore(deps-dev): bump @ types/node from 20.11.5 to 20.11.10 (@ dependabot[bot])
  - #13087 chore(deps-dev): bump mongoose from 8.0.4 to 8.1.0 (@ dependabot[bot])
  - #13088 chore(deps-dev): bump mysql2 from 3.7.1 to 3.8.0 (@ dependabot[bot])
  - #13090 chore(deps-dev): bump core-js from 3.35.0 to 3.35.1 (@ dependabot[bot])
  - #13091 chore(deps-dev): bump @ commitlint/config-angular from 18.4.4 to 18.5.0 (@ dependabot[bot])
  - #13092 chore(deps-dev): bump @ types/node from 20.11.4 to 20.11.5 (@ dependabot[bot])
- platform-fastify
  - #13148 chore(deps): bump @ fastify/cors from 9.0.0 to 9.0.1 (@ dependabot[bot])
  - #13128 chore(deps): bump fastify from 4.25.2 to 4.26.0 (@ dependabot[bot])
  - #13109 chore(deps): bump @ fastify/cors from 8.5.0 to 9.0.0 (@ dependabot[bot])
Committers: 7
- Alex (@ alexfriesen)
- Deniss Rezanovičs (@ Deniks)
- Doron Guttman (@ doronguttman)
- Ed Mitchell (@ edeesis)
- Leandro Fabri Pereira (@ leandrogenas)
- Toxol (@ toxol)
- @ josesilveiraa07
10.3.1 - 2024-01-23
Read more
10.3.0 - 2023-12-18
Read more
10.2.10 - 2023-11-20
v10.2.10
10.2.9 - 2023-11-17
10.2.8 - 2023-11-02
10.2.7 - 2023-10-05
10.2.6 - 2023-09-22
10.2.5 - 2023-09-11
10.2.4 - 2023-08-31
10.2.3 - 2023-08-30
10.2.2 - 2023-08-28
10.2.1 - 2023-08-22
10.2.0 - 2023-08-21
10.1.3 - 2023-07-31
10.1.2 - 2023-07-25
10.1.1 - 2023-07-24
10.1.0 - 2023-07-17
10.0.5 - 2023-07-03
10.0.4 - 2023-06-29
10.0.3 - 2023-06-21
10.0.2 - 2023-06-19
10.0.1 - 2023-06-17

from @nestjs/common GitHub release notes

Package name: @nestjs/core

10.3.8 - 2024-04-19
v10.3.8
10.3.7 - 2024-03-28
v10.3.7
10.3.6 - 2024-03-27
Read more
10.3.5 - 2024-03-22
v10.3.5
10.3.4 - 2024-03-18
Read more
10.3.3 - 2024-02-12
v10.3.3
10.3.2 - 2024-02-07
Read more
10.3.1 - 2024-01-23
Read more
10.3.0 - 2023-12-18
Read more
10.2.10 - 2023-11-20
v10.2.10
10.2.9 - 2023-11-17
10.2.8 - 2023-11-02
10.2.7 - 2023-10-05
10.2.6 - 2023-09-22
10.2.5 - 2023-09-11
10.2.4 - 2023-08-31
10.2.3 - 2023-08-30
10.2.2 - 2023-08-28
10.2.1 - 2023-08-22
10.2.0 - 2023-08-21
10.1.3 - 2023-07-31
10.1.2 - 2023-07-25
10.1.1 - 2023-07-24
10.1.0 - 2023-07-17
10.0.5 - 2023-07-03
10.0.4 - 2023-06-29
10.0.3 - 2023-06-21
10.0.2 - 2023-06-19
10.0.1 - 2023-06-17

from @nestjs/core GitHub release notes

Package name: @nestjs/platform-express

10.3.8 - 2024-04-19
v10.3.8
10.3.7 - 2024-03-28
v10.3.7
10.3.6 - 2024-03-27
Read more
10.3.5 - 2024-03-22
v10.3.5
10.3.4 - 2024-03-18
Read more
10.3.3 - 2024-02-12
v10.3.3
10.3.2 - 2024-02-07
Read more
10.3.1 - 2024-01-23
Read more
10.3.0 - 2023-12-18
Read more
10.2.10 - 2023-11-20
v10.2.10
10.2.9 - 2023-11-17
10.2.8 - 2023-11-02
10.2.7 - 2023-10-05
10.2.6 - 2023-09-22
10.2.5 - 2023-09-11
10.2.4 - 2023-08-31
10.2.3 - 2023-08-30
10.2.2 - 2023-08-28
10.2.1 - 2023-08-22
10.2.0 - 2023-08-21
10.1.3 - 2023-07-31
10.1.2 - 2023-07-25
10.1.1 - 2023-07-24
10.1.0 - 2023-07-17
10.0.5 - 2023-07-03
10.0.4 - 2023-06-29
10.0.3 - 2023-06-21
10.0.2 - 2023-06-19
10.0.1 - 2023-06-17

from @nestjs/platform-express GitHub release notes

Commit messages

Package name: @nestjs/common

6538ede chore(@ nestjs) publish v10.3.8 release
a0b5c26 Merge pull request #13430 from JonathanMbt/master
05a35b2 Merge pull request #13467 from nestjs/revert-13283-fix/unnecessary-call
044603a Revert "fix(microservice) �Delete unnecessary call of grpcClient.start"
6045d9e Merge pull request #13456 from nestjs/dependabot/npm_and_yarn/mongoose-8.3.2
3c5f86c Merge pull request #13457 from nestjs/dependabot/npm_and_yarn/core-js-3.37.0
1c433b8 chore(deps-dev): bump core-js from 3.36.1 to 3.37.0
805dd12 chore(deps-dev): bump mongoose from 8.3.1 to 8.3.2
64b2f4a Merge pull request #13460 from nestjs/dependabot/npm_and_yarn/ioredis-5.4.1
37525a9 Merge pull request #13464 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.4
d7a0a83 Merge pull request #13465 from nestjs/dependabot/npm_and_yarn/mysql2-3.9.6
2b589c4 chore(deps-dev): bump mysql2 from 3.9.4 to 3.9.6
b92fac2 chore(deps-dev): bump @ apollo/server from 4.10.3 to 4.10.4
87cf25a Merge pull request #13454 from micalevisk/chore/issue-13432
f092d34 chore(deps-dev): bump ioredis from 5.3.2 to 5.4.1
00dba2b ci: drop lint commit on circle ci
3765d7d chore(deps): remove unused dev dependencies
f5b53f1 Merge pull request #13445 from nestjs/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-7.7.0
722fc1c Merge pull request #13422 from nestjs/dependabot/npm_and_yarn/sample/07-sequelize/mysql2-3.9.4
3bc4f7c Merge pull request #13423 from nestjs/dependabot/npm_and_yarn/sample/05-sql-typeorm/mysql2-3.9.4
bfa0596 chore(deps-dev): bump @ typescript-eslint/eslint-plugin
6d885fe Merge pull request #13443 from nestjs/dependabot/npm_and_yarn/commitlint/config-angular-19.2.2
f67fa4c Merge pull request #13444 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.3
a7a8307 Merge pull request #13446 from nestjs/dependabot/npm_and_yarn/light-my-request-5.13.0

Compare

Package name: @nestjs/core

6538ede chore(@ nestjs) publish v10.3.8 release
a0b5c26 Merge pull request #13430 from JonathanMbt/master
05a35b2 Merge pull request #13467 from nestjs/revert-13283-fix/unnecessary-call
044603a Revert "fix(microservice) �Delete unnecessary call of grpcClient.start"
6045d9e Merge pull request #13456 from nestjs/dependabot/npm_and_yarn/mongoose-8.3.2
3c5f86c Merge pull request #13457 from nestjs/dependabot/npm_and_yarn/core-js-3.37.0
1c433b8 chore(deps-dev): bump core-js from 3.36.1 to 3.37.0
805dd12 chore(deps-dev): bump mongoose from 8.3.1 to 8.3.2
64b2f4a Merge pull request #13460 from nestjs/dependabot/npm_and_yarn/ioredis-5.4.1
37525a9 Merge pull request #13464 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.4
d7a0a83 Merge pull request #13465 from nestjs/dependabot/npm_and_yarn/mysql2-3.9.6
2b589c4 chore(deps-dev): bump mysql2 from 3.9.4 to 3.9.6
b92fac2 chore(deps-dev): bump @ apollo/server from 4.10.3 to 4.10.4
87cf25a Merge pull request #13454 from micalevisk/chore/issue-13432
f092d34 chore(deps-dev): bump ioredis from 5.3.2 to 5.4.1
00dba2b ci: drop lint commit on circle ci
3765d7d chore(deps): remove unused dev dependencies
f5b53f1 Merge pull request #13445 from nestjs/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-7.7.0
722fc1c Merge pull request #13422 from nestjs/dependabot/npm_and_yarn/sample/07-sequelize/mysql2-3.9.4
3bc4f7c Merge pull request #13423 from nestjs/dependabot/npm_and_yarn/sample/05-sql-typeorm/mysql2-3.9.4
bfa0596 chore(deps-dev): bump @ typescript-eslint/eslint-plugin
6d885fe Merge pull request #13443 from nestjs/dependabot/npm_and_yarn/commitlint/config-angular-19.2.2
f67fa4c Merge pull request #13444 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.3
a7a8307 Merge pull request #13446 from nestjs/dependabot/npm_and_yarn/light-my-request-5.13.0

Compare

Package name: @nestjs/platform-express

6538ede chore(@ nestjs) publish v10.3.8 release
a0b5c26 Merge pull request #13430 from JonathanMbt/master
05a35b2 Merge pull request #13467 from nestjs/revert-13283-fix/unnecessary-call
044603a Revert "fix(microservice) �Delete unnecessary call of grpcClient.start"
6045d9e Merge pull request #13456 from nestjs/dependabot/npm_and_yarn/mongoose-8.3.2
3c5f86c Merge pull request #13457 from nestjs/dependabot/npm_and_yarn/core-js-3.37.0
1c433b8 chore(deps-dev): bump core-js from 3.36.1 to 3.37.0
805dd12 chore(deps-dev): bump mongoose from 8.3.1 to 8.3.2
64b2f4a Merge pull request #13460 from nestjs/dependabot/npm_and_yarn/ioredis-5.4.1
37525a9 Merge pull request #13464 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.4
d7a0a83 Merge pull request #13465 from nestjs/dependabot/npm_and_yarn/mysql2-3.9.6
2b589c4 chore(deps-dev): bump mysql2 from 3.9.4 to 3.9.6
b92fac2 chore(deps-dev): bump @ apollo/server from 4.10.3 to 4.10.4
87cf25a Merge pull request #13454 from micalevisk/chore/issue-13432
f092d34 chore(deps-dev): bump ioredis from 5.3.2 to 5.4.1
00dba2b ci: drop lint commit on circle ci
3765d7d chore(deps): remove unused dev dependencies
f5b53f1 Merge pull request #13445 from nestjs/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-7.7.0
722fc1c Merge pull request #13422 from nestjs/dependabot/npm_and_yarn/sample/07-sequelize/mysql2-3.9.4
3bc4f7c Merge pull request #13423 from nestjs/dependabot/npm_and_yarn/sample/05-sql-typeorm/mysql2-3.9.4
bfa0596 chore(deps-dev): bump @ typescript-eslint/eslint-plugin
6d885fe Merge pull request #13443 from nestjs/dependabot/npm_and_yarn/commitlint/config-angular-19.2.2
f67fa4c Merge pull request #13444 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.3
a7a8307 Merge pull request #13446 from nestjs/dependabot/npm_and_yarn/light-my-request-5.13.0

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @nestjs/common from 10.0.1 to 10.3.8. See this package in npm: https://www.npmjs.com/package/@nestjs/common - @nestjs/core from 10.0.1 to 10.3.8. See this package in npm: https://www.npmjs.com/package/@nestjs/core - @nestjs/platform-express from 10.0.1 to 10.3.8. See this package in npm: https://www.npmjs.com/package/@nestjs/platform-express See this project in Snyk: https://app.snyk.io/org/abdulhakkam/project/b3537fa0-73ab-4e9c-8da4-4668433e36fd?utm_source=github&utm_medium=referral&page=upgrade-pr

AbdulHakkam self-assigned this May 10, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: @nestjs/common, @nestjs/core, @nestjs/platform-express #24

[Snyk] Upgrade: @nestjs/common, @nestjs/core, @nestjs/platform-express #24

AbdulHakkam commented May 10, 2024

v10.3.6 (2024-03-27)

Bug fixes

Dependencies

Committers: 2

v10.3.2 (2024-02-07)

Bug fixes

Enhancements

Dependencies

Committers: 7

[Snyk] Upgrade: @nestjs/common, @nestjs/core, @nestjs/platform-express #24

Are you sure you want to change the base?

[Snyk] Upgrade: @nestjs/common, @nestjs/core, @nestjs/platform-express #24

Conversation

AbdulHakkam commented May 10, 2024

Snyk has created this PR to upgrade multiple dependencies.

v10.3.6 (2024-03-27)

Bug fixes

Dependencies

Committers: 2

v10.3.2 (2024-02-07)

Bug fixes

Enhancements

Dependencies

Committers: 7