[dependabot]

Bumps @nestjs/common from 11.2.7 to 11.2.8.

Release notes

Sourced from @​nestjs/common's releases.

v11.2.8

What's changed

• @nestjs/common
  • fix(common): reject non-numeric items in ParseArrayPipe with items Number — backport of #17876
  • fix(common): reject arrays nested in ParseArrayPipe items — backport of #18073
  • fix(common): skip array holes when stripping prototype keys
  • fix(common): copy array and object defaults in DefaultValuePipe
  • fix(common): cut json log records short past a million characters
  • fix(common): strip a falsy constructor key from request data
  • fix(common): validate parsed array items one at a time
  • fix(common): stop copying nested validation errors for each level
  • fix(common): reject arrays and primitives for validated classes
  • fix(common): limit the length of validation error messages by default
  • fix(common): stop exposing the validated object on validation errors
  • fix(common): match a file type string up to the end of a name
  • fix(common): handle StreamableFile errors raised before the reply
  • fix(common): keep StreamableFile error messages out of responses
  • fix(common): abort the response when a streamable file fails midway — backport of #18220
• @nestjs/core
  • fix(core,express,fastify): match excluded routes like the router does
  • fix(core): match excluded routes exactly when the router is unknown
  • fix(core): answer host mismatches on fastify with 404
  • fix(core): never exclude request targets with "#" or in absolute form
  • fix(core): mount unversioned middleware paths under the default version
  • fix(core): map controller middleware under every module declaring it
  • fix(core): mount transient-scoped middleware instead of skipping it — on v11 this also mounts the middleware listed after a transient one, which was skipped as well
  • fix(core): drop an overlapped middleware route only when it is covered
  • fix(core): mount wildcard middleware on every path when "/" is excluded
  • fix(core): mount middleware paths on routes excluded from the prefix
  • fix(core): stop wildcard exclusions from covering their parent route
  • fix(core): run middleware on a controller root excluded by a wildcard
  • fix(core,common): exclude a version only for requests that ask for it
  • fix(core,microservices,websockets): ignore inherited keys of non-objects
  • fix(core): stop the Observable producer when the client disconnects — backport of #17826
  • fix(core): end sse responses to head requests once headers are sent
  • fix(core): do not send the message of an unexposed http error
  • fix(core): destroy a StreamableFile dropped by a timed-out handler
  • fix(core): destroy a StreamableFile that is not sent
  • fix(core,express,fastify): remove uploads of requests a pipe rejected
  • fix(core): hand sse header errors to the exception filters
  • fix(core): drop sse clients that stop reading their events
  • fix(core): hide internal error messages from sse error events
  • fix(core): make the sse pending data limit configurable
  • fix(core): apply the expose flag of http errors to sse error events
  • fix(core,microservices): run transient global enhancers on controllers — backport of #17993
  • fix(core): stop silently dropping request-scoped global enhancers — backport of #18066; a global enhancer whose dependency tree is request-scoped is no longer silently skipped
  • fix(core): fail at startup for request-scoped class global enhancers — backport of #18104; such an enhancer (e.g. APP_GUARD with useClass) now fails at startup instead of running without its dependencies
  • fix(core): read class-level enhancers from the registered class
  • fix(core): apply the enhancers of class providers under any token

... (truncated)

Commits

• 8e3a557 chore(release): publish v11.2.8 release
• 2246181 fix(common): abort the response when a streamable file fails midway (#18220)
• b9cc362 fix(core): make the sse pending data limit configurable
• da962a3 fix(common): keep StreamableFile error messages out of responses
• 988ab06 fix(common): handle StreamableFile errors raised before the reply
• f9a02e4 fix(common): match a file type string up to the end of a name
• a0ee2e4 fix(common): stop exposing the validated object on validation errors
• ba1ae3d fix(common): limit the length of validation error messages by default
• b3afc3e fix(common): reject arrays and primitives for validated classes
• 90db510 fix(common): stop copying nested validation errors for each level
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI (base), Organization UI (inherited)
• Review profile: CHILL
• Plan: Advanced
• Run ID: c7ebeade-c536-482c-8352-ff1a472d63d5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn