Skip to content

Bump body-parser, @nestjs/bull, @nestjs/core, @nestjs/platform-express, @nestjs/swagger and @nestjs/testing - #3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-db8328e0f1
Open

Bump body-parser, @nestjs/bull, @nestjs/core, @nestjs/platform-express, @nestjs/swagger and @nestjs/testing#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-db8328e0f1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown

Bumps body-parser to 2.3.0 and updates ancestor dependencies body-parser, @nestjs/bull, @nestjs/core, @nestjs/platform-express, @nestjs/swagger and @nestjs/testing. These dependencies need to be updated together.

Updates body-parser from 1.20.2 to 2.3.0

Release notes

Sourced from body-parser's releases.

v2.3.0

Important: Security

What's Changed

New Contributors

Full Changelog: expressjs/body-parser@v2.2.2...v2.3.0

v2.2.2

What's Changed

... (truncated)

Changelog

Sourced from body-parser's changelog.

2.3.0 / 2026-06-15

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: use static exports instead of lazy getters to improve ESM compatibility
  • feat: add subpath exports for individual parsers
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit
  • deps:
    • content-type@^2.0.0
    • http-errors@^2.0.1
    • iconv-lite^0.7.2
    • qs@^6.15.2
    • raw-body@^3.0.2
    • type-is@^2.1.0

2.2.2 / 2026-01-07

  • deps: qs@^6.14.1
  • refactor(json): simplify strict mode error string construction

2.2.1 / 2025-11-24

  • Security fix for GHSA-wqch-xfxh-vrr4
  • deps:
    • type-is@^2.0.1
    • iconv-lite@^0.7.0
      • Handle split surrogate pairs when encoding UTF-8
      • Avoid false positives in encodingExists by using prototype-less objects
    • raw-body@^3.0.1
    • debug@^4.4.3

2.2.0 / 2025-03-27

  • refactor: normalize common options for all parsers
  • deps:
    • iconv-lite@^0.6.3

2.1.0 / 2025-02-10

  • deps:
    • type-is@^2.0.0
    • debug@^4.4.0
    • Removed destroy
  • refactor: prefix built-in node module imports

... (truncated)

Commits
  • d0f2ace 2.3.0 (#735)
  • 7d03f2f chore: updated deps to latest (#733)
  • 8024ba7 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#732)
  • 32b4ed4 build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (#731)
  • ff0f6b9 docs: update outdated reference to MDN docs (#730)
  • 14d001a refactor: switch to const/let and enable eslint no-var rule (#729)
  • 37f36a2 deps: update content-type and type-is (#728)
  • e1c244b build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (#723)
  • e01087f build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#724)
  • a7698d3 build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (#725)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates @nestjs/bull from 10.1.0 to 11.0.5

Release notes

Sourced from @​nestjs/bull's releases.

@​nestjs/bullmq@​11.0.5

What's Changed

New Contributors

Full Changelog: https://github.com/nestjs/bull/compare/@​nestjs/bull-shared@11.0.0...@​nestjs/bullmq@11.0.5

@​nestjs/bullmq@​11.0.4

What's Changed

New Contributors

@​nestjs/bullmq@​11.0.3

What's Changed

New Contributors

Full Changelog: https://github.com/nestjs/bull/compare/@​nestjs/bull-shared@11.0.0...@​nestjs/bullmq@11.0.3

@​nestjs/bull@​11.0.2

What's Changed

Full Changelog: https://github.com/nestjs/bull/compare/@​nestjs/bull-shared@11.0.0...@​nestjs/bullmq@11.0.2

@​nestjs/bullmq@​11.0.2

What's Changed

Full Changelog: https://github.com/nestjs/bull/compare/@​nestjs/bull-shared@11.0.0...@​nestjs/bullmq@11.0.2

@​nestjs/bull@​11.0.1

@​nestjs/bullmq@​11.0.1

@​nestjs/bull-shared@​11.0.0

Changelog

... (truncated)

Commits
  • 323149d chore(release): publish new releases
  • 38a9240 ci: fix config.yml
  • e84add6 feat: support bullmq v6
  • 998aeef chore(deps): update dependency oxlint to v1.77.0 (#2877)
  • 4c28d35 chore(deps): update dependency lerna to v10 (#2876)
  • 514a30e chore(deps): update dependency bullmq to v5.81.3 (#2874)
  • 0c16caa chore(deps): update dependency oxlint to v1.76.0 (#2873)
  • db9e38f chore(deps): update dependency typescript to v7 (#2872)
  • 99e494f chore(deps): update dependency sort-package-json to v4 (#2871)
  • 5ce1663 chore(deps): update dependency sort-package-json to v3.7.1 (#2870)
  • Additional commits viewable in compare view

Updates @nestjs/core from 9.4.3 to 11.2.1

Release notes

Sourced from @​nestjs/core's releases.

v11.2.1

What's Changed

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

New Contributors

Full Changelog: nestjs/nest@v11.1.29...v11.2.0

v11.1.29

What's Changed

New Contributors

... (truncated)

Commits
  • 4535f43 chore(release): publish v11.2.1 release
  • a326599 fix(core): fix sse early-return
  • f2a7e4b chore(release): publish v11.2.0 release
  • b2e7fb5 Merge pull request #17469 from nestjs/feat/sse-signal
  • 6498f11 feat: signal should finalize in every case
  • 7627546 feat(core): sse signal
  • eac10cd Merge pull request #17162 from gacardinal/feat/query-http-method
  • 73f28b2 fix(core): scan pre-registered dynamic imports of lazy modules
  • 5061da3 Merge pull request #17416 from eeshsaxena/fix/legacy-route-converter-adjacent...
  • 8b759fe Merge pull request #17430 from shariyerShazan/fix/lazy-module-loader-singleto...
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 9.4.3 to 11.2.1

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.2.1

What's Changed

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

New Contributors

Full Changelog: nestjs/nest@v11.1.29...v11.2.0

v11.1.29

What's Changed

New Contributors

... (truncated)

Commits
  • 4535f43 chore(release): publish v11.2.1 release
  • f2a7e4b chore(release): publish v11.2.0 release
  • 03587a1 chore(release): publish v11.1.29 release
  • 4e4f8f0 Merge pull request #17421 from Se3do/fix/express-multer-limit-field-nesting
  • 2a532e7 chore: fix misspelled spec filenames
  • 4a40978 fix(express): map missing multer field nesting error
  • 7285778 chore: update multerExceptions constant
  • 92bc05d chore: update readme
  • dfaa376 chore(release): publish v11.1.28 release
  • 541977a fix(deps): update dependency multer to v2.2.0 [security]
  • Additional commits viewable in compare view

Updates @nestjs/swagger from 7.3.0 to 11.4.7

Release notes

Sourced from @​nestjs/swagger's releases.

11.4.7

What's Changed

New Contributors

Full Changelog: nestjs/swagger@11.4.6...11.4.7

Release 11.4.6

11.4.6 (2026-07-17)

Features

Bug fixes

Enhancements

Dependencies

Committers: 4

11.4.5

What's Changed

... (truncated)

Commits
  • 77e3d46 chore(): release v11.4.7
  • 782cdc0 Merge pull request #4056 from nestjs/renovate/js-yaml-5.x-lockfile
  • 4a5a4b0 Merge pull request #4005 from y-hsgw/fix/plugin-object-example
  • 11b3fb6 chore(deps): update dependency js-yaml to v5.3.0
  • e5203bf Merge pull request #4019 from kyungseopk1m/fix/readonly-outdir-import-path
  • fccfa59 Merge pull request #4030 from kyungseopk1m/fix/deep-partial-type-plugin-metadata
  • 91e5917 Merge pull request #4047 from kyungseopk1m/feat/api-header-extensions
  • 1296583 Merge pull request #4053 from nestjs/renovate/js-yaml-5.x
  • f436f56 Merge pull request #4054 from nestjs/renovate/fastify-static-10.x
  • b293944 Merge pull request #4042 from jorenl/bugfix/plugin-get-identifier-from-name-p...
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @nestjs/testing from 9.4.3 to 11.2.1

Release notes

Sourced from @​nestjs/testing's releases.

v11.2.1

What's Changed

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

New Contributors

Full Changelog: nestjs/nest@v11.1.29...v11.2.0

v11.1.29

What's Changed

New Contributors

... (truncated)

Commits
  • 4535f43 chore(release): publish v11.2.1 release
  • f2a7e4b chore(release): publish v11.2.0 release
  • 03587a1 chore(release): publish v11.1.29 release
  • 92bc05d chore: update readme
  • dfaa376 chore(release): publish v11.1.28 release
  • 660a124 chore(release): publish v11.1.27 release
  • aa5c4f1 chore: update readme and package.json
  • 9ff83d5 chore(release): publish v11.1.26 release
  • 02f8041 chore(release): publish v11.1.25 release
  • d8a0ab8 chore(release): publish v11.1.24 release
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…s, @nestjs/swagger and @nestjs/testing

Bumps [body-parser](https://github.com/expressjs/body-parser) to 2.3.0 and updates ancestor dependencies [body-parser](https://github.com/expressjs/body-parser), [@nestjs/bull](https://github.com/nestjs/bull), [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core), [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express), [@nestjs/swagger](https://github.com/nestjs/swagger) and [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing). These dependencies need to be updated together.


Updates `body-parser` from 1.20.2 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.2...v2.3.0)

Updates `@nestjs/bull` from 10.1.0 to 11.0.5
- [Release notes](https://github.com/nestjs/bull/releases)
- [Commits](https://github.com/nestjs/bull/compare/@nestjs/bull@10.1.0...@nestjs/bull@11.0.5)

Updates `@nestjs/core` from 9.4.3 to 11.2.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.1/packages/core)

Updates `@nestjs/platform-express` from 9.4.3 to 11.2.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.1/packages/platform-express)

Updates `@nestjs/swagger` from 7.3.0 to 11.4.7
- [Release notes](https://github.com/nestjs/swagger/releases)
- [Commits](nestjs/swagger@7.3.0...11.4.7)

Updates `@nestjs/testing` from 9.4.3 to 11.2.1
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.2.1/packages/testing)

---
updated-dependencies:
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: indirect
- dependency-name: "@nestjs/bull"
  dependency-version: 11.0.5
  dependency-type: direct:production
- dependency-name: "@nestjs/core"
  dependency-version: 11.2.1
  dependency-type: direct:production
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.2.1
  dependency-type: direct:production
- dependency-name: "@nestjs/swagger"
  dependency-version: 11.4.7
  dependency-type: direct:production
- dependency-name: "@nestjs/testing"
  dependency-version: 11.2.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants