chore(deps): bump the production group across 1 directory with 7 updates - #112
Merged
vineethkrishnan merged 1 commit intoAug 19, 2026
Merged
Conversation
Bumps the production group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.19` | `11.1.29` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.19` | `11.1.29` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.19` | `11.1.29` | | [@nestjs/typeorm](https://github.com/nestjs/typeorm) | `11.0.1` | `11.0.3` | | [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.3.0` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.3` | `9.0.5` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.20.0` | `8.23.0` | Updates `@nestjs/common` from 11.1.19 to 11.1.29 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.29/packages/common) Updates `@nestjs/core` from 11.1.19 to 11.1.29 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.29/packages/core) Updates `@nestjs/platform-express` from 11.1.19 to 11.1.29 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.29/packages/platform-express) Updates `@nestjs/typeorm` from 11.0.1 to 11.0.3 - [Release notes](https://github.com/nestjs/typeorm/releases) - [Commits](nestjs/typeorm@11.0.1...11.0.3) Updates `helmet` from 8.1.0 to 8.3.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v8.1.0...v8.3.0) Updates `nodemailer` from 9.0.3 to 9.0.5 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.0.3...v9.0.5) Updates `pg` from 8.20.0 to 8.23.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 11.1.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@nestjs/core" dependency-version: 11.1.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@nestjs/platform-express" dependency-version: 11.1.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: "@nestjs/typeorm" dependency-version: 11.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: helmet dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production - dependency-name: nodemailer dependency-version: 9.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
vineethkrishnan
approved these changes
Aug 19, 2026
vineethkrishnan
left a comment
vineethkrishnan
left a comment
Owner
There was a problem hiding this comment.
Safe to merge: production group, every bump stays in-major (nestjs 11.1.19 -> 11.1.29 patch, helmet 8.1 -> 8.3 minor, nodemailer 9.0.3 -> 9.0.5 patch, pg 8.20 -> 8.23 minor). CI fully green.
CI note: no auto-merge is configured on this repo, so this approval does not merge anything.
vineethkrishnan
deleted the
dependabot/npm_and_yarn/production-d126424ccd
branch
August 19, 2026 11:11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production group with 7 updates in the / directory:
11.1.1911.1.2911.1.1911.1.2911.1.1911.1.2911.0.111.0.38.1.08.3.09.0.39.0.58.20.08.23.0Updates
@nestjs/commonfrom 11.1.19 to 11.1.29Release notes
Sourced from @nestjs/common's releases.
... (truncated)
Commits
03587a1chore(release): publish v11.1.29 release1e11696fix(common): added test for #1739834e4dc1fix(common): exclude pipe options from validator options41d9f37Merge pull request #17327 from kyu4583/feat/sse-comment-fields3f03234Merge pull request #17333 from Ativ3k/feat/override-mimetype15f30d3fix(common): Add@publicApito ParseDatePipe, rename ParseArrayOptions54f6db2fix(common): Correct JSDoc in two http exceptions6e5b5a7test(common): add override mimetype validation coveragea8a3b55feat(common): add override mimetype option to file type validator9612c86feat(core): support sse commentsUpdates
@nestjs/corefrom 11.1.19 to 11.1.29Release notes
Sourced from @nestjs/core's releases.
... (truncated)
Commits
03587a1chore(release): publish v11.1.29 releaseb147e64chore: narrow type down to a random tupled047fbdMerge remote-tracking branch 'refs/remotes/origin/master'5adcd7achore: apply function decorator to middleware functions2edb01dMerge pull request #17360 from kyu4583/fix/sse-retry-zero51cef82Merge pull request #17400 from Se3do/fix/async-executor-anti-pattern58dc559test(core): add unit tests for module-ref8539f87refactor(core): remove async promise executor anti-patterns363aacbfix(core): resolve barrier immediately when target count is zero803fc2cfix(core): serialize SSE retry field when value is zeroUpdates
@nestjs/platform-expressfrom 11.1.19 to 11.1.29Release notes
Sourced from @nestjs/platform-express's releases.
... (truncated)
Commits
03587a1chore(release): publish v11.1.29 release4e4f8f0Merge pull request #17421 from Se3do/fix/express-multer-limit-field-nesting2a532e7chore: fix misspelled spec filenames4a40978fix(express): map missing multer field nesting error7285778chore: update multerExceptions constant92bc05dchore: update readmedfaa376chore(release): publish v11.1.28 release541977afix(deps): update dependency multer to v2.2.0 [security]660a124chore(release): publish v11.1.27 releaseaa5c4f1chore: update readme and package.jsonUpdates
@nestjs/typeormfrom 11.0.1 to 11.0.3Release notes
Sourced from @nestjs/typeorm's releases.
... (truncated)
Commits
3ac5f9achore(): release v11.0.36bff459chore: revert warning8d7f535chore: ci dont remove package-lockd667e3fchore: temp check ci fail450ba73test: comment data sources out02339catest: comment data sources out4fbe9a7chore: warn instead of throwing error, partially revert #2584ee4bd78chore(deps): update oxlint monorepo (#2638)26a5209chore(deps): update dependency lint-staged to v17.0.8 (#2635)345d5b0chore(deps): update dependency pg to v8.22.0 (#2634)Updates
helmetfrom 8.1.0 to 8.3.0Changelog
Sourced from helmet's changelog.
Commits
75f1a988.3.0f03f70dUpdate changelog for 8.3.0 releasea307fceFix capitalization in CSP package changelog5347b43Format default CSP in README for readability9afc570CSP: fix middleware-specific README missing link266c95cMinor speedups to project setups test7a4196cCSP: update package-specific changelog02716b4CSP: improve performance when there are no dynamic directives3f511edCSP: move utility functions to separate file80338afCSP: disabling defaults with no directives is now an errorUpdates
nodemailerfrom 9.0.3 to 9.0.5Release notes
Sourced from nodemailer's releases.
Changelog
Sourced from nodemailer's changelog.
Commits
742cff9chore(master): release 9.0.5 (#1843)524f0afchore: apply prettier to the punycode decode loop63685f7fix(mime): normalize an address parsed out of a string as welld899213test: cover the custom envelope path of every transportc4daee0chore(ci): trigger the workflows now that the Actions outage is over85d16c1fix(ci): retrigger the workflows dropped during the Actions outage76d0d92chore(deps): update devDependenciesa9343b4fix(mime): normalize an address so header and envelope agreeb7d772efix(mime): stop a header key callback and the dkim tags from injecting5ed9d26fix(mime): keep control chars out of the remaining header positionsUpdates
pgfrom 8.20.0 to 8.23.0Changelog
Sourced from pg's changelog.
Commits
df274d1Publisheb19d0fAdd opt-in query pipelining (#3652)b617619Publishd80b261Update docs & changelog835fb83Fix error handling for exceptions on values parsing. (#3574)f49ab4afix: correct spelling mistakes across codebase (#3692)d7175a4Expand CI matrix of PG versions and add direct SSL test (#3693)882fc30Add support for sslnegotiation=direct (PostgreSQL 17) (#3688)544b1cePublishcc03fa5Add scramMaxIterations option to limit SCRAM iteration count (#3677)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions