Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2026

Bumps axios to 1.13.5 and updates ancestor dependencies axios, @nestjs/common, @nestjs/core, @nestjs/graphql, @nestjs/mongoose, @nestjs/platform-express, @nestjs/testing and wait-on. These dependencies need to be updated together.

Updates axios from 0.24.0 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

  • fix: issues with version 1.13.3 (#7352) (ee90dfc)
    • Fixed issues discovered in v1.13.3 release

... (truncated)

Commits
  • 29f7542 chore(release): prepare release 1.13.5 (#7379)
  • 431c3a3 ci: fix run condition (#7373)
  • 9ff3a78 ci: update ymls (#7372)
  • 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
  • 475e75a feat: add input validation to isAbsoluteURL (#7326)
  • 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
  • 04cf019 docs: clarify object check comment (#7323)
  • 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
  • 569f028 fix: added a option to choose between legacy and the new request/response int...
  • 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.


Updates @nestjs/common from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/common's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits
  • e3a958a chore(release): publish v11.1.13 release
  • d88856c test(common): add unit tests for class serializer interceptor
  • a1f6162 Merge pull request #16202 from som14062005/fix/issue-16195
  • 8222634 refactor: move built-in types to module-level constant
  • 979a8e2 fix(common): Fix skipping maxArrayLength and maxStringLength option
  • 8fb17f5 fix(common): exclude built-in primitives from strip proto keys
  • 16296b9 fix(common): exclude built-in primitives from strip proto keys
  • 96932ad chore(release): publish v11.1.12 release
  • a52e608 fix(common): convert absolute paths to urls for esm loading
  • 8a5be22 fix(deps): update dependency file-type to v21.3.0
  • Additional commits viewable in compare view

Updates @nestjs/core from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/core's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits
  • e3a958a chore(release): publish v11.1.13 release
  • db9494a perf(core): use set instead of array for module registry lookup
  • 909b504 test(core): add unit tests for discovery service
  • 96932ad chore(release): publish v11.1.12 release
  • 4fdeb0b style: address lint issues
  • e5616c2 feat: apply instance decorator to all enhancers
  • 585f55f chore: revert lerna version
  • fef323b chore(release): publish v11.1.11 release
  • 15198c6 fix(core): add missing catch handler for forward-ref provider resolution
  • de5e026 chore(@​nestjs) publish v11.1.10 release
  • Additional commits viewable in compare view

Updates @nestjs/graphql from 9.1.2 to 13.2.4

Release notes

Sourced from @​nestjs/graphql's releases.

v13.2.4

13.2.4 (2026-02-04)

Enhancements

Dependencies

Committers: 2

v13.2.3

v13.2.2 (2025-12-13)

Bug fixes

Enhancements

Dependencies

Committers: 3

v13.2.1

13.2.1 (2025-10-02)

Bug fixes

  • apollo

... (truncated)

Commits
  • 2ef9dee v13.2.4
  • affe17b Merge pull request #3725 from nestjs/renovate/cimg-node-24.x
  • 8915adf chore(deps): update node.js to v24.13.0
  • 29ea8c5 Merge pull request #3824 from nestjs/renovate/npm-nestjs-platform-fastify-vul...
  • 9dca7e9 chore(deps): update dependency @​nestjs/platform-fastify to v11.1.11 [security]
  • 52a6c41 Merge pull request #3828 from nestjs/renovate/nest-monorepo
  • eb88829 Merge pull request #3829 from nestjs/renovate/mercurius-16.x
  • b2113d9 chore(deps): update dependency mercurius to v16.7.0
  • 5843058 chore(deps): update nest monorepo to v11.1.13
  • 817c47d Merge pull request #3827 from nestjs/dependabot/npm_and_yarn/fastify-5.7.3
  • Additional commits viewable in compare view

Updates @nestjs/mongoose from 9.0.2 to 9.2.2

Release notes

Sourced from @​nestjs/mongoose's releases.

Release 9.2.2

  • chore: support the latest version of mongoose (4ab97f8)
  • chore: fix hooks (b0697da)
  • Merge pull request #1680 from nestjs/renovate/cimg-node-19.x (87c22b3)
  • chore(deps): update dependency typescript to v5 (37e051a)
  • chore(deps): update dependency @​types/jest to v29.5.0 (6fd8659)
  • chore(deps): update dependency release-it to v15.9.0 (f72cad5)
  • chore(deps): update dependency @​types/jest to v29.4.4 (121ccbb)
  • chore(deps): update nest monorepo to v9.3.10 (ede0caa)
  • chore(deps): update node.js to v19.7 (bf1653b)
  • chore(deps): update dependency @​types/jest to v29.4.2 (04a9eef)
  • chore(deps): update dependency @​types/node to v18.15.3 (5d74bcb)
  • chore(deps): update typescript-eslint monorepo to v5.55.0 (05d883c)
  • chore(deps): update dependency mongoose to v6.10.3 (ca8253f)
  • chore(deps): update dependency @​types/node to v18.15.2 (786bc46)
  • chore(deps): update dependency @​types/jest to v29.4.1 (0935859)
  • chore(deps): update dependency @​types/node to v18.15.1 (85a1877)
  • chore(deps): update dependency eslint to v8.36.0 (b08db82)
  • chore(deps): update dependency lint-staged to v13.2.0 (21784d7)
  • chore(deps): update dependency @​types/node to v18.15.0 (fc2e9dd)
  • chore(deps): update dependency release-it to v15.8.0 (3f47cfa)
  • chore(deps): update dependency mongoose to v6.10.2 (566b691)
  • chore(deps): update dependency jest to v29.5.0 (62eafb8)
  • chore(deps): update typescript-eslint monorepo to v5.54.1 (a836357)
  • chore(deps): update dependency eslint-config-prettier to v8.7.0 (19ea358)
  • chore(deps): update dependency mongoose to v6.10.1 (ca1c8e9)
  • chore(deps): update dependency @​types/node to v18.14.6 (f8ae548)
  • chore(deps): update dependency @​types/node to v18.14.5 (d50d091)
  • chore(deps): update dependency @​types/node to v18.14.4 (3c5e069)
  • chore(deps): update dependency release-it to v15.7.0 (525d0e7)
  • chore(deps): update dependency release-it to v15.6.1 (95fdcc6)
  • chore(deps): update typescript-eslint monorepo to v5.54.0 (1aee303)
  • chore(deps): update dependency @​types/node to v18.14.2 (e7e255d)
  • chore(deps): update dependency eslint to v8.35.0 (7572697)
  • chore(deps): update dependency @​types/node to v18.14.1 (4efa1bb)
  • chore(deps): update dependency mongoose to v6.10.0 (46a76a6)
  • chore(deps): update dependency mongoose to v6.9.3 (f28558e)
  • chore(deps): update typescript-eslint monorepo to v5.53.0 (e854da6)
  • chore(deps): update dependency @​types/node to v18.14.0 (500b516)
  • chore(deps): update commitlint monorepo to v17.4.4 (c929764)
  • chore(deps): update dependency mongoose to v6.9.2 (917d6ee)
  • chore(deps): update dependency jest to v29.4.3 (d198334)
  • chore(deps): update nest monorepo to v9.3.9 (60b7354)
  • chore(deps): update typescript-eslint monorepo to v5.52.0 (75f6f0d)
  • chore(deps): update dependency lint-staged to v13.1.2 (794bbed)
  • chore(deps): update commitlint monorepo to v17.4.3 (8e6275a)
  • chore(deps): update dependency eslint to v8.34.0 (7e528d7)
  • chore(deps): update nest monorepo to v9.3.8 (439a6ab)
  • Merge pull request #1640 from nestjs/dependabot/npm_and_yarn/cookiejar-2.1.4 (61cf5d5)
  • Merge pull request #1632 from nestjs/renovate/cimg-node-19.x (44ddbe2)

... (truncated)

Commits
  • b97dcae chore(): release v9.2.2
  • 4ab97f8 chore: support the latest version of mongoose
  • b0697da chore: fix hooks
  • 87c22b3 Merge pull request #1680 from nestjs/renovate/cimg-node-19.x
  • 37e051a chore(deps): update dependency typescript to v5
  • 6fd8659 chore(deps): update dependency @​types/jest to v29.5.0
  • f72cad5 chore(deps): update dependency release-it to v15.9.0
  • 121ccbb chore(deps): update dependency @​types/jest to v29.4.4
  • ede0caa chore(deps): update nest monorepo to v9.3.10
  • bf1653b chore(deps): update node.js to v19.7
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/platform-express's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits
  • e3a958a chore(release): publish v11.1.13 release
  • 58c761a fix(deps): update dependency cors to v2.8.6
  • 96932ad chore(release): publish v11.1.12 release
  • 585f55f chore: revert lerna version
  • fef323b chore(release): publish v11.1.11 release
  • de5e026 chore(@​nestjs) publish v11.1.10 release
  • 8f0840a test(express): Add tests for getBodyParserOptions utility
  • 0c93692 chore: update prettier
  • 0430f3f chore: resolve conflicts
  • 5045fea chore: update eslint monorepo
  • Additional commits viewable in compare view

Updates @nestjs/testing from 8.2.6 to 11.1.13

Release notes

Sourced from @​nestjs/testing's releases.

v11.1.13 (2026-02-03)

Bug fixes

  • common
    • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@​chojs23)

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

  • platform-fastify

... (truncated)

Commits

Updates wait-on from 6.0.0 to 9.0.3

Release notes

Sourced from wait-on's releases.

v9.0.3

Update to jsdoc. Thanks @​westonruter

Minor dependencies updated: eslint, mocha, axios

v9.0.2

Replaced unmaintained expect-legacy package with chai. Thanks @​bdkopen

v9.0.1

Update minor deps:

  • axios
  • eslint

v9.0.0

Updating major version to align with removal of unspported versions of Node.js

wait-on will continue to support the active and maintained releases listed at https://nodejs.org/en/about/previous-releases which currently is 20, 22, 24.

There are no other breaking changes other than changing the versions of Node.js that are supported.

v8.0.5

Update minor deps including axios@1.12.1 and joi@18

v8.0.4

Update dependencies including axios@1.11.0 which also updated form-data@4.0.4

v8.0.3

  • update minor deps
  • update eslint to v9

v8.0.2

Dependency updates:

  • axios@1.7.9
  • eslint-plugin-import@2.31.0
  • cross-spawn - npm audit fix

v8.0.0 - breaking change for http unix socket use

Updated for security vulnerabilities with axios@1.7.4 and braces.

Breaking change in using latest axios with a unix socket URL

As part of the axios update, the syntax for using a socket with an http URL in axios has changed so you must specify the protocol and server

For example:

http://unix:SOCKETPATH:http://server/foo/bar

instead of just using only the path (no protocol and no server)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…ngoose, @nestjs/platform-express, @nestjs/testing and wait-on

Bumps [axios](https://github.com/axios/axios) to 1.13.5 and updates ancestor dependencies [axios](https://github.com/axios/axios), [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common), [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core), [@nestjs/graphql](https://github.com/nestjs/graphql), [@nestjs/mongoose](https://github.com/nestjs/mongoose), [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express), [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) and [wait-on](https://github.com/jeffbski/wait-on). These dependencies need to be updated together.


Updates `axios` from 0.24.0 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v0.24.0...v1.13.5)

Updates `@nestjs/common` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/common)

Updates `@nestjs/core` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/core)

Updates `@nestjs/graphql` from 9.1.2 to 13.2.4
- [Release notes](https://github.com/nestjs/graphql/releases)
- [Commits](nestjs/graphql@9.1.2...v13.2.4)

Updates `@nestjs/mongoose` from 9.0.2 to 9.2.2
- [Release notes](https://github.com/nestjs/mongoose/releases)
- [Commits](nestjs/mongoose@9.0.2...9.2.2)

Updates `@nestjs/platform-express` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/platform-express)

Updates `@nestjs/testing` from 8.2.6 to 11.1.13
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v11.1.13/packages/testing)

Updates `wait-on` from 6.0.0 to 9.0.3
- [Release notes](https://github.com/jeffbski/wait-on/releases)
- [Commits](jeffbski/wait-on@v6.0.0...v9.0.3)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: indirect
- dependency-name: "@nestjs/common"
  dependency-version: 11.1.13
  dependency-type: direct:production
- dependency-name: "@nestjs/core"
  dependency-version: 11.1.13
  dependency-type: direct:production
- dependency-name: "@nestjs/graphql"
  dependency-version: 13.2.4
  dependency-type: direct:production
- dependency-name: "@nestjs/mongoose"
  dependency-version: 9.2.2
  dependency-type: direct:production
- dependency-name: "@nestjs/platform-express"
  dependency-version: 11.1.13
  dependency-type: direct:production
- dependency-name: "@nestjs/testing"
  dependency-version: 11.1.13
  dependency-type: direct:development
- dependency-name: wait-on
  dependency-version: 9.0.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants