Skip to content

chore(deps): bump @nestjs/passport from 11.0.5 to 12.0.0 in /generators/node-server/resources - #1357

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/generators/node-server/resources/nestjs/passport-12.0.0
Open

chore(deps): bump @nestjs/passport from 11.0.5 to 12.0.0 in /generators/node-server/resources#1357
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/generators/node-server/resources/nestjs/passport-12.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps @nestjs/passport from 11.0.5 to 12.0.0.

Release notes

Sourced from @​nestjs/passport's releases.

Release 12.0.0

What's Changed

@nestjs/passport is now a native ES module, and the major version is aligned with the Nest 12 release line.

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals (e.g. @nestjs/passport/dist/auth.guard) are no longer resolvable — import from the package root:

import { AuthGuard, PassportModule, PassportStrategy } from '@nestjs/passport';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, a CommonJS app can keep doing:

const { AuthGuard, PassportModule } = require('@nestjs/passport');

This requires Node.js 20.19+ or 22.12+ (where require(esm) is enabled by default). On older Node versions you must either upgrade Node or move your app to ESM.

AuthGuard no longer forwards module options to passport.authenticate()

defaultStrategy and property — options that belong to PassportModule.register(), not to Passport itself — were being passed straight through to passport.authenticate(), where they could collide with strategy-level options. They are now stripped before the call, so a strategy only ever receives real AuthenticateOptions.

The signature of getAuthenticateOptions() changed accordingly:

// before
getAuthenticateOptions(
  context: ExecutionContext,
): Promise<IAuthModuleOptions> | IAuthModuleOptions | undefined;
// after
getAuthenticateOptions(
context: ExecutionContext,
):
| Promise<AuthGuardAuthenticateOptions>
| AuthGuardAuthenticateOptions
| undefined;

AuthGuardAuthenticateOptions is exported from the package root and is passport.AuthenticateOptions with defaultStrategy explicitly disallowed. If you override getAuthenticateOptions() and return defaultStrategy, TypeScript will now flag it — remove it and set it via PassportModule.register({ defaultStrategy: '...' }) instead.

Peer dependencies

"peerDependencies": {
</tr></table> 

... (truncated)

Commits
  • 0f15350 chore(): release v12.0.0
  • c6af6f6 chore: upgrade to v12
  • d05c93e chore(deps): update dependency oxlint to v1.80.0 (#2309)
  • 8d06e0c chore(deps): update nest monorepo to v11.2.3 (#2308)
  • 875fddc chore(deps): update dependency oxlint to v1.79.0 (#2307)
  • dd63061 chore(deps): update vitest monorepo to v4.1.11 (#2306)
  • 28e6701 Merge pull request #2300 from GiHoon1123/fix-947-authenticate-options
  • 849d11c Merge master into fix-947-authenticate-options, resolve conflicts
  • de02b20 Merge pull request #2250 from nestjs/renovate/cimg-node-24.x
  • e27a9c8 Merge pull request #2230 from nestjs/chore/esm-migration
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@nestjs/passport](https://github.com/nestjs/passport) from 11.0.5 to 12.0.0.
- [Release notes](https://github.com/nestjs/passport/releases)
- [Commits](nestjs/passport@11.0.5...12.0.0)

---
updated-dependencies:
- dependency-name: "@nestjs/passport"
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants