[dependabot]

Bumps @nestjs/platform-express from 11.2.7 to 11.2.8.

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.2.8

What's changed

• @nestjs/common
  • fix(common): reject non-numeric items in ParseArrayPipe with items Number — backport of #17876
  • fix(common): reject arrays nested in ParseArrayPipe items — backport of #18073
  • fix(common): skip array holes when stripping prototype keys
  • fix(common): copy array and object defaults in DefaultValuePipe
  • fix(common): cut json log records short past a million characters
  • fix(common): strip a falsy constructor key from request data
  • fix(common): validate parsed array items one at a time
  • fix(common): stop copying nested validation errors for each level
  • fix(common): reject arrays and primitives for validated classes
  • fix(common): limit the length of validation error messages by default
  • fix(common): stop exposing the validated object on validation errors
  • fix(common): match a file type string up to the end of a name
  • fix(common): handle StreamableFile errors raised before the reply
  • fix(common): keep StreamableFile error messages out of responses
  • fix(common): abort the response when a streamable file fails midway — backport of #18220
• @nestjs/core
  • fix(core,express,fastify): match excluded routes like the router does
  • fix(core): match excluded routes exactly when the router is unknown
  • fix(core): answer host mismatches on fastify with 404
  • fix(core): never exclude request targets with "#" or in absolute form
  • fix(core): mount unversioned middleware paths under the default version
  • fix(core): map controller middleware under every module declaring it
  • fix(core): mount transient-scoped middleware instead of skipping it — on v11 this also mounts the middleware listed after a transient one, which was skipped as well
  • fix(core): drop an overlapped middleware route only when it is covered
  • fix(core): mount wildcard middleware on every path when "/" is excluded
  • fix(core): mount middleware paths on routes excluded from the prefix
  • fix(core): stop wildcard exclusions from covering their parent route
  • fix(core): run middleware on a controller root excluded by a wildcard
  • fix(core,common): exclude a version only for requests that ask for it
  • fix(core,microservices,websockets): ignore inherited keys of non-objects
  • fix(core): stop the Observable producer when the client disconnects — backport of #17826
  • fix(core): end sse responses to head requests once headers are sent
  • fix(core): do not send the message of an unexposed http error
  • fix(core): destroy a StreamableFile dropped by a timed-out handler
  • fix(core): destroy a StreamableFile that is not sent
  • fix(core,express,fastify): remove uploads of requests a pipe rejected
  • fix(core): hand sse header errors to the exception filters
  • fix(core): drop sse clients that stop reading their events
  • fix(core): hide internal error messages from sse error events
  • fix(core): make the sse pending data limit configurable
  • fix(core): apply the expose flag of http errors to sse error events
  • fix(core,microservices): run transient global enhancers on controllers — backport of #17993
  • fix(core): stop silently dropping request-scoped global enhancers — backport of #18066; a global enhancer whose dependency tree is request-scoped is no longer silently skipped
  • fix(core): fail at startup for request-scoped class global enhancers — backport of #18104; such an enhancer (e.g. APP_GUARD with useClass) now fails at startup instead of running without its dependencies
  • fix(core): read class-level enhancers from the registered class
  • fix(core): apply the enhancers of class providers under any token

... (truncated)

Commits

• 8e3a557 chore(release): publish v11.2.8 release
• e1944e1 fix(express): stop reading a streamable file for a head request
• a69d986 fix(core,express,fastify): remove uploads of requests a pipe rejected
• 8edd9ed fix(express,fastify): handle a StreamableFile that cannot be streamed
• 26003c6 fix(express): send object error bodies with a json content type
• 2a2af0f fix(express): destroy the StreamableFile source on client disconnect (#17973)
• 20ee552 fix(express): map multer array index and invalid field name codes to 400 (#17...
• 6a4e49a fix(express): apply middleware to controller root routes in strict mode
• 9e79a27 fix(core): mount wildcard middleware on every path when "/" is excluded
• 5557ceb fix(express): run wildcard middleware on "/api/" for a named wildcard
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: 332e8e8a-d575-4ffe-93d1-8c9dd932be39

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn