Skip to content

Bump axios, @nestjs/common, @nestjs/core, @nestjs/mongoose, @nestjs/passport, @nestjs/platform-express, @nestjs/testing and wait-on in /nest-auth#398

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/nest-auth/multi-8bb0ca41a8
Open

Bump axios, @nestjs/common, @nestjs/core, @nestjs/mongoose, @nestjs/passport, @nestjs/platform-express, @nestjs/testing and wait-on in /nest-auth#398
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/nest-auth/multi-8bb0ca41a8

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2026

Bumps axios to 1.13.5 and updates ancestor dependencies axios, @nestjs/common, @nestjs/core, @nestjs/mongoose, @nestjs/passport, @nestjs/platform-express, @nestjs/testing and wait-on. These dependencies need to be updated together.

Updates axios from 0.24.0 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

  • fix: issues with version 1.13.3 (#7352) (ee90dfc)
    • Fixed issues discovered in v1.13.3 release

... (truncated)

Commits
  • 29f7542 chore(release): prepare release 1.13.5 (#7379)
  • 431c3a3 ci: fix run condition (#7373)
  • 9ff3a78 ci: update ymls (#7372)
  • 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
  • 475e75a feat: add input validation to isAbsoluteURL (#7326)
  • 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
  • 04cf019 docs: clarify object check comment (#7323)
  • 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
  • 569f028 fix: added a option to choose between legacy and the new request/response int...
  • 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.


Updates @nestjs/common from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/common's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits
  • e3a958a chore(release): publish v11.1.13 release
  • d88856c test(common): add unit tests for class serializer interceptor
  • a1f6162 Merge pull request #16202 from som14062005/fix/issue-16195
  • 8222634 refactor: move built-in types to module-level constant
  • 979a8e2 fix(common): Fix skipping maxArrayLength and maxStringLength option
  • 8fb17f5 fix(common): exclude built-in primitives from strip proto keys
  • 16296b9 fix(common): exclude built-in primitives from strip proto keys
  • 96932ad chore(release): publish v11.1.12 release
  • a52e608 fix(common): convert absolute paths to urls for esm loading
  • 8a5be22 fix(deps): update dependency file-type to v21.3.0
  • Additional commits viewable in compare view

Updates @nestjs/core from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/core's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits
  • e3a958a chore(release): publish v11.1.13 release
  • db9494a perf(core): use set instead of array for module registry lookup
  • 909b504 test(core): add unit tests for discovery service
  • 96932ad chore(release): publish v11.1.12 release
  • 4fdeb0b style: address lint issues
  • e5616c2 feat: apply instance decorator to all enhancers
  • 585f55f chore: revert lerna version
  • fef323b chore(release): publish v11.1.11 release
  • 15198c6 fix(core): add missing catch handler for forward-ref provider resolution
  • de5e026 chore(@​nestjs) publish v11.1.10 release
  • Additional commits viewable in compare view

Updates @nestjs/mongoose from 9.0.2 to 9.2.2

Release notes

Sourced from @​nestjs/mongoose's releases.

Release 9.2.2

  • chore: support the latest version of mongoose (4ab97f8)
  • chore: fix hooks (b0697da)
  • Merge pull request #1680 from nestjs/renovate/cimg-node-19.x (87c22b3)
  • chore(deps): update dependency typescript to v5 (37e051a)
  • chore(deps): update dependency @​types/jest to v29.5.0 (6fd8659)
  • chore(deps): update dependency release-it to v15.9.0 (f72cad5)
  • chore(deps): update dependency @​types/jest to v29.4.4 (121ccbb)
  • chore(deps): update nest monorepo to v9.3.10 (ede0caa)
  • chore(deps): update node.js to v19.7 (bf1653b)
  • chore(deps): update dependency @​types/jest to v29.4.2 (04a9eef)
  • chore(deps): update dependency @​types/node to v18.15.3 (5d74bcb)
  • chore(deps): update typescript-eslint monorepo to v5.55.0 (05d883c)
  • chore(deps): update dependency mongoose to v6.10.3 (ca8253f)
  • chore(deps): update dependency @​types/node to v18.15.2 (786bc46)
  • chore(deps): update dependency @​types/jest to v29.4.1 (0935859)
  • chore(deps): update dependency @​types/node to v18.15.1 (85a1877)
  • chore(deps): update dependency eslint to v8.36.0 (b08db82)
  • chore(deps): update dependency lint-staged to v13.2.0 (21784d7)
  • chore(deps): update dependency @​types/node to v18.15.0 (fc2e9dd)
  • chore(deps): update dependency release-it to v15.8.0 (3f47cfa)
  • chore(deps): update dependency mongoose to v6.10.2 (566b691)
  • chore(deps): update dependency jest to v29.5.0 (62eafb8)
  • chore(deps): update typescript-eslint monorepo to v5.54.1 (a836357)
  • chore(deps): update dependency eslint-config-prettier to v8.7.0 (19ea358)
  • chore(deps): update dependency mongoose to v6.10.1 (ca1c8e9)
  • chore(deps): update dependency @​types/node to v18.14.6 (f8ae548)
  • chore(deps): update dependency @​types/node to v18.14.5 (d50d091)
  • chore(deps): update dependency @​types/node to v18.14.4 (3c5e069)
  • chore(deps): update dependency release-it to v15.7.0 (525d0e7)
  • chore(deps): update dependency release-it to v15.6.1 (95fdcc6)
  • chore(deps): update typescript-eslint monorepo to v5.54.0 (1aee303)
  • chore(deps): update dependency @​types/node to v18.14.2 (e7e255d)
  • chore(deps): update dependency eslint to v8.35.0 (7572697)
  • chore(deps): update dependency @​types/node to v18.14.1 (4efa1bb)
  • chore(deps): update dependency mongoose to v6.10.0 (46a76a6)
  • chore(deps): update dependency mongoose to v6.9.3 (f28558e)
  • chore(deps): update typescript-eslint monorepo to v5.53.0 (e854da6)
  • chore(deps): update dependency @​types/node to v18.14.0 (500b516)
  • chore(deps): update commitlint monorepo to v17.4.4 (c929764)
  • chore(deps): update dependency mongoose to v6.9.2 (917d6ee)
  • chore(deps): update dependency jest to v29.4.3 (d198334)
  • chore(deps): update nest monorepo to v9.3.9 (60b7354)
  • chore(deps): update typescript-eslint monorepo to v5.52.0 (75f6f0d)
  • chore(deps): update dependency lint-staged to v13.1.2 (794bbed)
  • chore(deps): update commitlint monorepo to v17.4.3 (8e6275a)
  • chore(deps): update dependency eslint to v8.34.0 (7e528d7)
  • chore(deps): update nest monorepo to v9.3.8 (439a6ab)
  • Merge pull request #1640 from nestjs/dependabot/npm_and_yarn/cookiejar-2.1.4 (61cf5d5)
  • Merge pull request #1632 from nestjs/renovate/cimg-node-19.x (44ddbe2)

... (truncated)

Commits
  • b97dcae chore(): release v9.2.2
  • 4ab97f8 chore: support the latest version of mongoose
  • b0697da chore: fix hooks
  • 87c22b3 Merge pull request #1680 from nestjs/renovate/cimg-node-19.x
  • 37e051a chore(deps): update dependency typescript to v5
  • 6fd8659 chore(deps): update dependency @​types/jest to v29.5.0
  • f72cad5 chore(deps): update dependency release-it to v15.9.0
  • 121ccbb chore(deps): update dependency @​types/jest to v29.4.4
  • ede0caa chore(deps): update nest monorepo to v9.3.10
  • bf1653b chore(deps): update node.js to v19.7
  • Additional commits viewable in compare view

Updates @nestjs/passport from 8.1.0 to 11.0.5

Release notes

Sourced from @​nestjs/passport's releases.

Release 11.0.5

  • fix: exclude last argument only if its of type function (cb) (1a7123a)

Release 11.0.4

  • fix: remove redundant exclude unknown type (7a7ea87)
  • fix: strategy ctor overload type extractor generic. Solves #1857 (99a3245)

Release 11.0.3

  • fix: use all ctor params type to include overloads #1857 (84c8838)

11.0.0

v11.0.0

Release 10.0.3

  • Merge pull request #1455 from nestjs/renovate/cimg-node-21.x (fe6ad2e)
  • Merge pull request #1502 from nestjs/renovate/passport-0.x (f46ffb9)
  • chore(deps): update dependency lint-staged to v15.2.0 (46b4f69)
  • chore(deps): update dependency @​types/node to v20.10.3 (d213a85)
  • chore(deps): update dependency eslint-config-prettier to v9.1.0 (69bb1f6)
  • chore(deps): update dependency eslint to v8.55.0 (f5fa401)
  • chore(deps): update dependency @​types/node to v20.10.2 (1e9cad1)
  • chore(deps): update dependency @​types/node to v20.10.1 (145ecda)
  • chore(deps): update typescript-eslint monorepo to v6.13.1 (70a908f)
  • chore(deps): update typescript-eslint monorepo to v6.13.0 (c73d48e)
  • chore(deps): update dependency passport to v0.7.0 (d0b9a60)
  • chore(deps): update dependency @​types/node to v20.10.0 (4f3245d)
  • chore(deps): update dependency @​types/node to v20.9.5 (114a3b6)
  • chore(deps): update dependency @​types/node to v20.9.4 (4002acc)
  • chore(deps): update dependency @​types/jest to v29.5.10 (6dc6c09)
  • chore(deps): update dependency @​types/passport to v1.0.16 (502554c)
  • chore(deps): update dependency @​types/node to v20.9.3 (82c77c4)
  • chore(deps): update commitlint monorepo to v18.4.3 (1dae894)
  • chore(deps): update dependency @​types/jest to v29.5.9 (b1e0fa8)
  • chore(deps): update typescript-eslint monorepo to v6.12.0 (7d4dc10)
  • chore(deps): update dependency typescript to v5.3.2 (96cb3ea)
  • chore(deps): update nest monorepo to v10.2.10 (d8313ed)
  • chore(deps): update dependency @​types/node to v20.9.2 (dd750ce)
  • chore(deps): update dependency eslint to v8.54.0 (b7c9666)
  • chore(deps): update nest monorepo to v10.2.9 (3b9472f)
  • chore(deps): update dependency @​types/node to v20.9.1 (b80e559)
  • chore(deps): update commitlint monorepo to v18.4.2 (6678d6a)
  • chore(deps): update node.js to v21 (68cebed)
  • chore(deps): update typescript-eslint monorepo to v6.11.0 (c98e1e4)
  • chore(deps): update dependency prettier to v3.1.0 (6fbd769)
  • chore(deps): update dependency @​commitlint/cli to v18.4.1 (d13e432)
  • chore(deps): update dependency lint-staged to v15.1.0 (156f7fc)
  • chore(deps): update dependency release-it to v17 (7ae90f1)

... (truncated)

Commits
  • 1432808 chore(): release v11.0.5
  • d3775ac Merge pull request #1866 from nestjs/fix/without-callback-fix
  • 28a0835 Merge pull request #1867 from nestjs/renovate/lint-staged-15.x
  • 53ba5d6 chore(deps): update dependency lint-staged to v15.4.2
  • 223c1cb Merge pull request #1863 from nestjs/renovate/node-22.x
  • bda4914 Merge pull request #1864 from nestjs/renovate/nest-monorepo
  • 1a7123a fix: exclude last argument only if its of type function (cb)
  • 6fa6d91 chore(deps): update nest monorepo to v11.0.5
  • 8b3f7e3 chore(deps): update dependency @​types/node to v22.10.9
  • 3c877f8 chore(deps): update nest monorepo to v11.0.4 (#1862)
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits
  • e3a958a chore(release): publish v11.1.13 release
  • 58c761a fix(deps): update dependency cors to v2.8.6
  • 96932ad chore(release): publish v11.1.12 release
  • 585f55f chore: revert lerna version
  • fef323b chore(release): publish v11.1.11 release
  • de5e026 chore(@​nestjs) publish v11.1.10 release
  • 8f0840a test(express): Add tests for getBodyParserOptions utility
  • 0c93692 chore: update prettier
  • 0430f3f chore: resolve conflicts
  • 5045fea chore: update eslint monorepo
  • Additional commits viewable in compare view

Updates @nestjs/testing from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/testing's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits

Updates wait-on from 6.0.0 to 9.0.3

Release notes

Sourced from wait-on's releases.

v9.0.3

Update to jsdoc. Thanks @​westonruter

Minor dependencies updated: eslint, mocha, axios

v9.0.2

Replaced unmaintained expect-legacy package with chai. Thanks @​bdkopen

v9.0.1

Update minor deps:

  • axios
  • eslint

v9.0.0

Updating major version to align with removal of unspported versions of Node.js

wait-on will continue to support the active and maintained releases listed at https://nodejs.org/en/about/previous-releases which currently is 20, 22, 24.

There are no other breaking changes other than changing the versions of Node.js that are supported.

v8.0.5

Update minor deps including axios@1.12.1 and joi@18

v8.0.4

Update dependencies including axios@1.11.0 which also updated form-data@4.0.4

v8.0.3

  • update minor deps
  • update eslint to v9

v8.0.2

Dependency updates:

  • axios@1.7.9
  • eslint-plugin-import@2.31.0
  • cross-spawn - npm audit fix

v8.0.0 - breaking change for http unix socket use

Updated for security vulnerabilities with axios@1.7.4 and braces.

Breaking change in using latest axios with a unix socket URL

As part of the axios update, the syntax for using a socket with an http URL in axios has changed so you must specify the protocol and server

For example:

http://unix:SOCKETPATH:http://server/foo/bar

instead of just using only the path (no protocol and no server)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…assport, @nestjs/platform-express, @nestjs/testing and wait-on

Bumps [axios](https://github.com/axios/axios) to 1.13.5 and updates ancestor dependencies [axios](https://github.com/axios/axios), [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common), [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core), [@nestjs/mongoose](https://github.com/nestjs/mongoose), [@nestjs/passport](https://github.com/nestjs/passport), [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express), [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) and [wait-on](https://github.com/jeffbski/wait-on). These dependencies need to be updated together.


Updates `axios` from 0.24.0 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.24.0...v1.13.5)

Updates `@nestjs/common` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/common)

Updates `@nestjs/core` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/core)

Updates `@nestjs/mongoose` from 9.0.2 to 9.2.2
- [Release notes](https://github.com/nestjs/mongoose/releases)
- [Commits](nestjs/mongoose@9.0.2...9.2.2)

Updates `@nestjs/passport` from 8.1.0 to 11.0.5
- [Release notes](https://github.com/nestjs/passport/releases)
- [Commits](nestjs/passport@8.1.0...11.0.5)

Updates `@nestjs/platform-express` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/platform-express)

Updates `@nestjs/testing` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/testing)

Updates `wait-on` from 6.0.0 to 9.0.3
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v6.0.0...v9.0.3)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: indirect
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.13
  dependency-type: direct:production
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.13
  dependency-type: direct:production
- dependency-name: "@nestjs/mongoose"
  dependency-version: 9.2.2
  dependency-type: direct:production
- dependency-name: "@nestjs/passport"
  dependency-version: 11.0.5
  dependency-type: direct:production
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.1.13
  dependency-type: direct:production
- dependency-name: "@nestjs/testing"
  dependency-version: 11.1.13
  dependency-type: direct:development
- dependency-name: wait-on
  dependency-version: 9.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants