chore(deps): bump the production-dependencies group with 18 updates

[dependabot]

Bumps the production-dependencies group with 18 updates:

Package	From	To
prettier	3.6.2	3.9.1
next	16.0.10	16.2.9
react	19.2.3	19.2.7
react-dom	19.2.3	19.2.7
@scure/bip32	2.0.0	2.2.0
@scure/bip39	2.0.0	2.2.0
fumadocs-core	16.8.5	16.10.6
fumadocs-ui	16.8.5	16.10.6
mermaid	11.15.0	11.16.0
@nestjs/common	11.1.6	11.1.27
@nestjs/config	4.0.2	4.0.4
@nestjs/core	11.1.6	11.1.27
@nestjs/platform-express	11.1.6	11.1.27
class-validator	0.14.2	0.15.1
axios	1.11.0	1.18.1
bitcoinjs-lib	7.0.0	7.0.1
monaco-editor	0.52.2	0.55.1
valibot	1.4.1	1.4.2

Updates prettier from 3.6.2 to 3.9.1

Release notes

Sourced from prettier's releases.

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

3.8.3

• SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @​kovsu)

🔗 Changelog

3.8.2

• Support Angular v21.2

🔗 Changelog

3.8.1

• Include available printers in plugin type declarations (#18706 by @​porada)

🔗 Changelog

3.8.0

• Support Angular v21.1

diff

🔗 Release note "Prettier 3.8: Support for Angular v21.1"

3.7.4

What's Changed

• Fix comment in union type gets duplicated by @​fisker in prettier/prettier#18393
• Fix unstable comment print in union type by @​fisker in prettier/prettier#18395
• Avoid quote around LWC interpolations by @​kovsu in prettier/prettier#18383

... (truncated)

Changelog

Sourced from prettier's changelog.

3.9.1

diff

CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

Bug details prettier/prettier#18016

3.9.0

diff

🔗 Release Notes

3.8.5

diff

Flow: Support readonly as a variance annotation (#19022 by @​marcoww6)

Flow now accepts readonly as a property variance annotation, equivalent to + (covariant/read-only).

// Input
type T = {
  readonly foo: string,
};
// Prettier 3.8.4
SyntaxError
// Prettier 3.8.5
type T = {
readonly foo: string,
};

3.8.4

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a
</tr></table> 

... (truncated)

Commits

• c47654c Release 3.9.1
• 06159aa Fix bug in release script
• 4bc5ab4 Update file-entry-cache to 11.1.5 (#19483)
• b7fd58b Release @prettier/plugin-oxc@0.2.0 and @prettier/plugin-hermes@0.2.0
• 3006400 Revert changes in release script
• 7bef7db Git blame ignore 3.9.0
• bb817b1 Bump Prettier dependency to 3.9.0
• 05cf896 Clean changelog_unreleased
• 79f6cdf Disable finished steps
• 3613b1e Add blog post for v3.9 (#19414)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for prettier since your current version.

Updates next from 16.0.10 to 16.2.9

Release notes

Sourced from next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• Backport documentation fixes for v16.2 (#93804)
• [backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)
• [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
• [backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)
• [backport] Encode non-ASCII characters in cache tags at construction (#93918)
• [backport] Fix server action forwarding loop with middleware rewrites (#93919)
• [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
• [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
• [backport] Fix "type: module" in project dir when using standalone or adapters (#94050)
• [backport] Propagate adapter preferred regions (#94200)
• [16.2.x] Don't drop FormData entries (#94240)
• [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @​eps1lon, @​icyJoseph, @​unstubbable, @​mischnic, @​bgw, @​timneutkens, and @​lukesandberg for helping!

v16.2.6

[!NOTE] This release contains security fixes and backported bug fixes. It does not include all pending features/changes on canary.

Security Fixes

The following advisories have been addressed:

High:

• GHSA-8h8q-6873-q5fj: Denial of Service with Server Components
• GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
• GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up
• GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components
• GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection
• GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades
• GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

• GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces
• GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input
• GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API

... (truncated)

Commits

• f37fad9 v16.2.9
• d9aaaed [cd] Allow tagging semver-lower releases as @latest if @latest po… (#94627)
• 6f16804 v16.2.8
• 0dbc1d5 [16.2.x][cd] Ensure release can be triggered on old branches (#94598)
• 90e3c81 [16.2.x] Align Actions dependencies with Canary (#94339)
• 83f402c [16.2.x][cd] Stop fetching all tags when searching parent tag (#94334)
• 411c455 v16.2.7
• c63224f [backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolut...
• 63115c7 [16.2.x] Don't drop FormData entries (#94240)
• aef22fd [backport] Propagate adapter preferred regions (#94200)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for next since your current version.

Updates react from 19.2.3 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• 90ab3f8 Version 19.2.4
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates react-dom from 19.2.3 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• 90ab3f8 Version 19.2.4
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates @scure/bip32 from 2.0.0 to 2.2.0

Release notes

Sourced from @​scure/bip32's releases.

2.2.0

• April 2026 self-audit (all files): no major issues found
  • Audited for spec compliance and security
• Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
  • TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
  • This creates incompatibility of code between versions
  • Previously, it was hard to use and constantly emitted errors similar to TS2345
  • See typescript#62240 for more context
• Fix compilation issues on TypeScript v6
• Upgrade dependencies to self-audited 2.2.0

(We're skipping v2.1, to align with other noble / scure packages)

Full Changelog: paulmillr/scure-bip32@2.0.1...2.2.0

2.0.1

• Upgrade noble-hashes to v2.0.1 and noble-curves to v2.0.1
• Upgrade noble-hashes to 2.0.1
• Upgrade noble-curves to 2.0.1

Full Changelog: paulmillr/scure-bip32@2.0.0...2.0.1

Commits

• 1ff8a0b Release 2.2.0.
• f914026 Changes related to April 2026 audit
• 5f9d856 Bump typescripts to 6.0.2
• fd929d5 Bump devdeps.
• 89d756c Upgrade to ts 6.0-rc, jsbt 0.5. Add code quality scripts to pkg.json.
• 21c4bea Add lots of docs everywhere.
• 9a4cd14 readme
• 32b6f8e Fix bun tests
• b77488a ci: Update jsbt
• 9104f9f Release 2.0.1.
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​scure/bip32 since your current version.

Updates @scure/bip39 from 2.0.0 to 2.2.0

Release notes

Sourced from @​scure/bip39's releases.

2.2.0

• April 2026 self-audit (all files): no major issues found
  • Audited for spec compliance and security
• Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
  • TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
  • This creates incompatibility of code between versions
  • Previously, it was hard to use and constantly emitted errors similar to TS2345
  • See typescript#62240 for more context
• Fix compilation issues on TypeScript v6
• Improve tree-shaking, reduce bundle sizes
• Fix wordlists/traditional-chinese.js: it was exported incorrectly
• Wordlists: add PURE annotations to improve tree-shaking
• Wordlists: freeze the arrays to improve security

New Contributors

• @​Yvem made their first contribution in paulmillr/scure-bip39#26
• @​rikublock made their first contribution in paulmillr/scure-bip39#29

(We're skipping v2.1, to align with other noble / scure packages)

Full Changelog: paulmillr/scure-bip39@2.0.1...2.2.0

2.0.1

• .js extension must be used for all modules
  • Old: @scure/bip39/wordlists/english
  • New: @scure/bip39/wordlists/english.js
  • This simplifies working in browsers natively without transpilers
  • This was planned for 2.0.0, but was accidentally left out
• Improve typescript autocompletion for imported submodules
• Upgrade noble-hashes to 2.0.1
• Upgrade noble-curves to 2.0.1

Full Changelog: paulmillr/scure-bip39@2.0.0...2.0.1

Commits

• 7114063 Release 2.2.0.
• 2e1e400 Changes related to April 2026 audit
• 376a95a Improve wordlist tree-shaking
• 1954395 Bump typescripts to 6.0.2
• d8a18de Fix tests
• 93dd1d4 Bump devdeps.
• 67affed Upgrade to ts 6.0-rc, jsbt 0.5. Add code quality scripts to pkg.json.
• e05d3c0 Add more docs everywhere
• 9d27974 readme
• ca2dccf Merge pull request #29 from rikublock/riku/fix-export-chinese
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​scure/bip39 since your current version.

Updates fumadocs-core from 16.8.5 to 16.10.6

Release notes

Sourced from fumadocs-core's releases.

fumadocs-core@16.10.3

No release notes provided.

fumadocs-core@16.10.2

Patch Changes

• 7e9548b: Fix infinite re-render where (1) a React transition is triggered, (2) the search dialog is inside <Suspense />. This causes the loading state to be false even after setLoading(true), as transition will freeze state updates, and break the render-time state checks of useDocsSearch().
• 0997dd6: Deprecate type: "xxx" usage of useDocsSearch(), pass the client object instead. The allows a smaller bundle size with improved performance.
• 71d58b8: Add $infer to content loader instance for easier type inference.

fumadocs-core@16.10.1

No release notes provided.

fumadocs-core@16.10.0

Patch Changes

• 9b9545f: Add package issue tracker metadata.

fumadocs-core@16.9.3

Patch Changes

• 42f0255: Support invalidate & revalidate on dynamic loader
• a807798: Improve source API utils & types

fumadocs-core@16.9.1

Patch Changes

• e77b9b3: Introduce pagesIndex property to explicitly define the index page for folder
• 334c8fd: [i18n] support different orders of preset() calls

fumadocs-core@16.8.12

Patch Changes

• 768b676: Standardize structuredData in page data

fumadocs-core@16.8.11

Patch Changes

• 1dc86c7: loosen the range for waku

fumadocs-core@16.8.10

Patch Changes

• 062beab: fix internal types
• 505cfe0: Add remark-block-id plugin

Commits

• 593302d Version Packages (#3382)
• 923e581 docs: add more FAQs
• 9fae790 add missing changesets
• 6ab44ad update lock file
• b038183 fix(local-md): fix deprecation warnings
• 4bf7f0d fix(tanstack-start-spa): remove getPageMarkdownUrl, unused and identical to s...
• d0b57c8 fix(api-docs): inline ref-parser
• 839e3aa feat(core): handle BASE_PATH automatically
• 88d1a8a fix(tanstack-start): api search for SPA with serve (#3378)
• 4abdb05 refactor: use cnfast
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.8.5 to 16.10.6

Release notes

Sourced from fumadocs-ui's releases.

fumadocs-ui@16.10.3

Patch Changes

• 5499f59: type-safe provider props
  • fumadocs-core@16.10.3

fumadocs-ui@16.10.2

Patch Changes

• e977acf: Change the TOC variants

  The "clerk" TOC variant will revert to the original Clerk-like style, the redesigned TOC (the one you see on official docs) will be the new default.

• 0997dd6: Deprecate type: "xxx" usage of useDocsSearch(), pass the client object instead. The allows a smaller bundle size with improved performance.

• Updated dependencies [7e9548b]

• Updated dependencies [0997dd6]

• Updated dependencies [71d58b8]

  • fumadocs-core@16.10.2

fumadocs-ui@16.10.1

Patch Changes

• 5017289: Use stable fuma-translate
• 7a77722: fix display name of languages
  • fumadocs-core@16.10.1

fumadocs-ui@16.10.0

Minor Changes

• 779efff: Introduce new translations API

  It is now powered by fuma-translate. Be careful: while the API surface is same, some translation keys are changed, unused labels will be ignored.

Patch Changes

• 0cc1fac: Make uiTranslations() optional for translations API
• Updated dependencies [9b9545f]
  • fumadocs-core@16.10.0

fumadocs-ui@16.9.3

Patch Changes

• Updated dependencies [42f0255]
• Updated dependencies [a807798]
  • fumadocs-core@16.9.3

fumadocs-ui@16.9.1

Patch Changes

• Updated dependencies [e77b9b3]

... (truncated)

Commits

• 593302d Version Packages (#3382)
• 923e581 docs: add more FAQs
• 9fae790 add missing changesets
• 6ab44ad update lock file
• b038183 fix(local-md): fix deprecation warnings
• 4bf7f0d fix(tanstack-start-spa): remove getPageMarkdownUrl, unused and identical to s...
• d0b57c8 fix(api-docs): inline ref-parser
• 839e3aa feat(core): handle BASE_PATH automatically
• 88d1a8a fix(tanstack-start): api search for SPA with serve (#3378)
• 4abdb05 refactor: use cnfast
• Additional commits viewable in compare view

Updates mermaid from 11.15.0 to 11.16.0

Release notes

Sourced from mermaid's releases.

mermaid@11.16.0

Minor Changes

• #7535 ea1c48f Thanks @​ragelink! - feat(cynefin): Adds the Cynefin framework as a new diagram type (beta) to Mermaid (available as cynefin-beta). The Cynefin framework, created by Dave Snowden, is a decision-making framework that categorizes problems into five complexity domains, widely used in agile, incident management, strategy, and organizational design.

• #7721 f45cc2c Thanks @​notionparallax! - feat(treeView): add box-drawing character input support for treeView diagrams

• #7550 f1f4d45 Thanks @​DominicBurkart! - feat(xychart): add per-point text labels for xychart line plots

• #7527 b4d0442 Thanks @​notionparallax! - feat(treeView): Extends the existing treeView-beta diagram with features useful for representing file/directory structures.

• #7793 a6f097d Thanks @​SSDWGG! - feat(er): support optional ER attribute types with a ? suffix

• #7772 37f2e36 Thanks @​devareddy05! - feat(gantt): support multiple excludes / includes lines so long exclusion lists can be split into commented groups (#6270)

• #7708 4e63e9d Thanks @​txmxthy! - feat(architecture): add align row|column {ids…} directive to architecture-beta diagrams so authors can declare horizontal or vertical alignment of services explicitly.

• #7760 05223be Thanks @​ngdaniels! - feat(pie): Enhance Pie Chart - Enable donut chart, Set legend position, and highlight slice

• #7251 216e4e9 Thanks @​ydah! - feat(railroad): Add support for Railroad Diagrams (Syntax Diagrams) with four input syntaxes: IR (railroad-beta), EBNF (railroad-ebnf-beta), ABNF (railroad-abnf-beta), and PEG (railroad-peg-beta).

• #7774 e5c75e6 Thanks @​ngdaniels! - feat(xychart): enable rotate label on X-axis

• #7791 974fa7b Thanks @​knsv-bot! - feat(swimlane): add swimlane as a standalone diagram type with a dedicated layered orthogonal layout algorithm

Patch Changes

• #7744 633c261 Thanks @​ashishjain0512! - fix(architecture): add architecture.seed config option to make architecture diagrams render deterministically. Resolves #7729.

• #7732 c8ba156 Thanks @​rkdfx! - fix: tolerate leading horizontal whitespace before YAML frontmatter delimiters. Closes mermaid-js/mermaid#7613

• #7314 4e4e6c4 Thanks @​darshanr0107! - fix(flowchart): Prevent crash when flowchart node shape is undefined

• #7762 cfd2391 Thanks @​Dharya-dev! - fix(class): support styling and callbacks for generic classes

• #7284 c1f116d Thanks @​darshanr0107! - fix(gantt): Render gantt vertical markers without affecting row layout or chart height

• #7786 72fbab1 Thanks @​knsv-bot! - fix(er): allow special characters (e.g. dots) in ER diagram attribute names and types by escaping them with backticks

• #7672 4887e97 Thanks @​sjackson0109! - fix(flowchart): respect per-subgraph direction keyword in Dagre layout. Fixes #4648

• #7734 a4c1e50 Thanks @​OfirHaf! - fix(block): read block padding and sanitize config dynamically instead of at module load time

• #7674 cc75089 Thanks @​cyphercodes! - fix(block): respect current DOMPurify config when sanitizing labels

• #7711 be2e282 Thanks @​Jinacker! - fix(flowchart): render flowchart and state self-loop edges as a single SVG path.

• #7781 d945968 Thanks @​Dharya-dev! - fix(radar): align axis labels based on angular position to prevent clipping

• #7661 2f5e9e8 Thanks @​nabila401! - fix(venn): fix 3-circle venn diagram union rendering

... (truncated)

Commits

• 7c0cafc Version Packages: v11.16.0 (#7916)
• 26acd1a Merge pull request #7915 from mermaid-js/release/11.16.0
• 5a8eae7 Merge branch 'master' into release/11.16.0
• dd5ea77 Merge pull request #7913 from mermaid-js/pebr/fix-changesets
• 658ee66 docs: fix missing bumps of @mermaid-js/parser
• 04259a1 docs: fix author and commit on examples changeset
• c9dcfb1 docs: update changeset diagram scopes
• a34dab9 docs: remove swimlane/cynefin bugfix changesets
• e81f31f docs: remove local-editor changeset
• 7223f03 Minor correction
• Additional commits viewable in compare view

Updates @nestjs/common from 11.1.6 to 11.1.27

Release notes

Sourced from @​nestjs/common's releases.

v11.1.27

What's Changed

• fix(core): sse async handlers teardown issue by @​kamilmysliwiec in nestjs/nest#17131
• fix(platform-fastify): forRoutes middleware ending slash by @​kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

• fix(core): post sse endpoint empty response #17098 by @​kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

• fix(microservices): reject pending Redis requests on close by @​yudin-s in nestjs/nest#17024
• fix(core): register SSE close listener before async setup by @​fallintoplace in nestjs/nest#17018
• fix(platform-fastify): remove pathname ending slash by @​kamilmysliwiec in nestjs/nest#17094

New Contributors

• @​fallintoplace made their first contribution in nestjs/nest#17018
• @​DucMinhNe made their first contribution in nestjs/nest#17085
• @​iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core

... (truncated)

Commits

• 660a124 chore(release): publish v11.1.27 release
• aa5c4f1 chore: update readme and package.json
• 9ff83d5 chore(release): publish v11.1.26 release
• 02f8041 chore(release): publish v11.1.25 release
• 1634915 test(common): Add unit tests for cli-colors utility
• 380bf5c Merge pull request #17058 from Se3do/test/extend-metadata
• af4542b test(common): Add unit tests for assignCustomParameterMetadata
• b67aea1 test(common): Add unit tests for extendArrayMetadata
• e1e4014 test(common): Tighten throw assertions in validateModuleKeys spec
• 6b97771 test(common): Add unit tests for validateModuleKeys
• Additional commits viewable in compare view

Updates @nestjs/config from 4.0.2 to 4.0.4

Release notes

Sourced from @​nestjs/config's releases.

Release 4.0.4

• fix(deps): update dependency dotenv to v17.4.1 (6bc5737)
• fix(deps): update dependency lodash to v4.18.1 [security] (f31ee98)

Release 4.0.3

What's Changed

• fix(deps): update dependency lodash to v4.17.23 [security] by @​renovate[bot] in nestjs/config#2250
• fix(deps): update dependency dotenv-expand to v12.0.3 by @​renovate[bot] in nestjs/config#2146
• fix(deps): update dependency dotenv to v17 by @​renovate[bot] in nestjs/config#2100

Full Changelog: nestjs/config@4.0.2...4.0.3

Commits

• 3b5d592 chore(): release v4.0.4
• 4fbcb03 Merge pull request #2263 from nestjs/renovate/dotenv-17.x
• 33dae89 Merge pull request #2269 from nestjs/renovate/cimg-node-24.x
• 0a727c3 Merge pull request #2313 from nestjs/renovate/npm-lodash-vulnerability
• 6bc5737 fix(deps): update dependency dotenv to v17.4.1
• f31ee98 fix(deps): update dependency lodash to v4.18.1 [security]
• 059314c chore(deps): update dependency typescript-eslint to v8.58.1 (#2315)
• 0f81e2d chore(deps): update dependency eslint to v10.2.0 (#2314)
• e673ab2 chore(deps): update dependency @​types/node to v24.12.2 (#2311)
• b1ede30 chore(deps): update nest monorepo to v11.1.18 (#2312)
• Additional commits viewable in compare view

Updates @nestjs/core from 11.1.6 to 11.1.27

Release notes

Sourced from @​nestjs/core's releases.

v11.1.27

What's Changed

• fix(core): sse async handlers teardown issue by @​kamilmysliwiec in nestjs/nest#17131
• fix(platform-fastify): forRoutes middleware ending slash by @​kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

• fix(core): post sse endpoint empty response #17098 by @​kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

• fix(microservices): reject pending Redis requests on close by @​yudin-s in nestjs/nest#17024
• fix(core): register SSE close listener before async setup by @​fallintoplace in nestjs/nest#17018
• fix(platform-fastify): remove pathname ending slash by @​kamilmysliwiec in nestjs/nest#17094

New Contributors

• @​fallintoplace made their first contribution in nestjs/nest#17018
• @​DucMinhNe made their first contribution in nestjs/nest#17085
• @​iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

v11.1.24 (2026-05-25)

Description has been truncated

[changeset-bot]

⚠️ No Changeset found

Latest commit: 9ff4368

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Hanssen0]

@dependabot recreate

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.