fix(deps): update nest monorepo to v11 by renovate[bot] · Pull Request #1376 · leosuncin/nest-api-example

renovate · 2025-01-16T13:08:06Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@nestjs/cli	`10.4.9` → `11.0.24`
@nestjs/passport	`10.0.3` → `11.0.5`
@nestjs/platform-express (source)	`10.4.22` → `11.1.28`
@nestjs/schematics	`10.2.3` → `11.1.0`
@nestjs/terminus	`10.3.0` → `11.1.1`
@nestjs/testing (source)	`10.4.22` → `11.1.28`

Release Notes

nestjs/nest-cli (@nestjs/cli)

`v11.0.24`

Compare Source

fix(compiler): fail fast when typescript lacks the programmatic api (3c6b4ac)
refactor: move available languages closer to first usage (1697b7f)
refactor: delete unused gulp tool utility helper file (75b57c4)
fix(runners): remove duplicated binary in failed command message (54b08ae)

`v11.0.23`

Compare Source

Revert "fix(compiler): validate delete out dir paths before rm" (0dd0e3e)
Revert "fix(compiler): validate asset output paths" (728f80c)

`v11.0.22`

Compare Source

fix(cli): resolve Windows path separator bug in plugin loader (9e502bd)
fix(compiler): validate asset output paths (c4342b2)
fix: Update CRUD option to accept a value for generating entry points (4c0e2ca)
feat: Add type and CRUD options in generate command (b19856a)

`v11.0.21`

Compare Source

fix: revert #3315 due to #3390 (255a559)

`v11.0.20`

Compare Source

fix: revert #3313 due to #3391 and #3390 (705bb7d)
chore(deps): update swc monorepo (8496c76)
fix(assets-manager): return promise from close watchers (2181947)
fix(swc): fix inverted chokidar ignored filter in watch mode (a3890cb)
fix: add type annotations to caught errors (c46ddd7)

`v11.0.19`

Compare Source

What's Changed

fix(types): correct Asset type definition from string literal to string union by @yogeshwaran-c in #3323
fix(generate): use selected project name for specFileSuffix lookup by @yogeshwaran-c in #3325
fix(info): add missing space in os version display by @yogeshwaran-c in #3321
fix(compiler): run tsconfig paths plugin before user plugins in tsc compiler by @yogeshwaran-c in #3326
fix(start): skip signal forwarding in watch mode by @maruthang in #3338
feat(compiler): resolve path aliases in declaration files by @maruthang in #3344
fix(deps): update angular-cli monorepo to v19.2.24 by @renovate[bot] in #3337

Full Changelog: nestjs/nest-cli@11.0.18...11.0.19

`v11.0.18`

Compare Source

What's Changed

fix(build): delete tsbuildinfo file with out dir (#3312) by @maruthang in #3317
fix(swc): prevent double initialization in watch mode by @maruthang in #3316
fix(swc): respect root dir option for strip leading paths by @maruthang in #3318
fix(cli): error on unexpected extra positional arguments by @maruthang in #3314
fix(start): wait for async shutdown hooks before exiting by @maruthang in #3313
fix(assets): use ready event for watcher closing by @maruthang in #3315
fix: expand @swc/cli peer range to include ^0.8.0 by @wwenrr in #3309
chore(deps): update dependency @nestjs/schematics to v11.0.10 by @renovate[bot] in #3300
refactor(compiler): potential undefined access in getWebpackConfigPath by @zendy199x in #3296
fix(deps): update angular-cli monorepo to v19.2.23 by @renovate[bot] in #3299

New Contributors

@maruthang made their first contribution in #3317
@wwenrr made their first contribution in #3309
@zendy199x made their first contribution in #3296

Full Changelog: nestjs/nest-cli@11.0.17...11.0.18

`v11.0.17`

Compare Source

What's Changed

fix(deps): update angular-cli monorepo to v19.2.23 by @renovate[bot] in #3274
fix(deps): update dependency webpack to v5.105.4 by @renovate[bot] in #3273
fix(deps): update dependency glob to v13.0.6 by @renovate[bot] in #3271

Full Changelog: nestjs/nest-cli@11.0.16...11.0.17

`v11.0.16`

Compare Source

Merge pull request #3246 from nestjs/revert-3183-renovate/inquirer-prompts-8.x (a93d919)
Revert "fix(deps): update dependency @inquirer/prompts to v8" (a335950)

`v11.0.15`

Compare Source

What's Changed

chore(deps): update dependency @swc/core to v1.15.8 by @renovate[bot] in #3230
chore(deps): update dependency @swc/cli to v0.7.10 by @renovate[bot] in #3242
fix(utils): tree-kill use spawn sync to fix node 24 crash by @LucM in #3235
fix(deps): update dependency webpack to v5.104.1 by @renovate[bot] in #3221
chore(deps): update node.js to v24.13.0 by @renovate[bot] in #3214
fix(deps): update dependency @inquirer/prompts to v8 by @renovate[bot] in #3183

New Contributors

@LucM made their first contribution in #3235

Full Changelog: nestjs/nest-cli@11.0.14...11.0.15

`v11.0.14`

Compare Source

What's Changed

ci: switch npm ignore to allow list by @bryopsida in #3203

New Contributors

@bryopsida made their first contribution in #3203

Full Changelog: nestjs/nest-cli@11.0.13...11.0.14

`v11.0.13`

Compare Source

chore(deps): update dependency @swc/core to v1.15.3 (#3196) (361d050)
fix(deps): update dependency glob to v13 (e7e254c)
fix: Node v24 DEP0190 warning by removing args for shell: true (367c29b)
fix(deps): update dependency webpack to v5.103.0 (dcca650)

What's Changed

fix(deps): update angular-cli monorepo to v19.2.19 by @renovate[bot] in #3148
refactor(dependency): Remove tree-kill dependency by @gcstarr in #3157
chore(deps): update dependency @swc/core to v1.15.2 by @renovate[bot] in #3181
fix(deps): update dependency glob to v12 by @renovate[bot] in #3186
fix(deps): update dependency @inquirer/prompts to v7.10.1 by @renovate[bot] in #3178
fix(deps): update dependency ansis to v4.2.0 by @renovate[bot] in #3171

Full Changelog: nestjs/nest-cli@11.0.10...11.0.11

`v11.0.10`

Compare Source

What's Changed

Revert "chore: disable shell by default" by @kamilmysliwiec in #3114
Revert "fix(deps): update angular-cli monorepo to v20 (major)" by @kamilmysliwiec in #3115

Full Changelog: nestjs/nest-cli@11.0.9...11.0.10

`v11.0.9`

Compare Source

fix(deps): update angular-cli monorepo to v20 (5bbd8f8)
chore: disable shell by default (c31554d)
fix(deps): update dependency @inquirer/prompts to v7.8.0 (4897ce2)

`v11.0.8`

Compare Source

What's Changed

chore(deps): update dependency @swc/core to v1.13.2 by @renovate[bot] in #3100
fix(deps): update dependency ansis to v4 by @renovate[bot] in #3026
fix(deps): update angular-cli monorepo to v19.2.15 by @renovate[bot] in #3001
fix(deps): update dependency webpack to v5.100.2 by @renovate[bot] in #3008
fix(deps): update dependency glob to v11.0.3 - autoclosed by @renovate[bot] in #3002
fix(deps): update dependency @inquirer/prompts to v7.7.1 by @renovate[bot] in #3005

Full Changelog: nestjs/nest-cli@11.0.7...11.0.8

`v11.0.7`

Compare Source

What's Changed

fix(deps): update angular-cli monorepo to v19.2.8 by @renovate in #2985
chore(deps): update dependency @swc/cli to v0.7.3 by @renovate in #2994
feat: support multiple --env-file arguments by @micalevisk in #3000
fix(deps): update dependency webpack to v5.99.6 by @renovate in #2996

Full Changelog: nestjs/nest-cli@11.0.6...11.0.7

`v11.0.6`

Compare Source

What's Changed

fix(deps): update dependency ansis to v3.17.0 by @renovate in #2936
chore(deps): update dependency @swc/core to v1.11.16 by @renovate in #2972
style: adjust spacing after heart emoji in package_manager_question by @RayRemnant in #2974
fix(deps): update angular-cli monorepo to v19.2.6 by @renovate in #2946
fix(deps): update dependency fork-ts-checker-webpack-plugin to v9.1.0 by @renovate in #2968
fix(deps): update dependency @inquirer/prompts to v7.4.1 by @renovate in #2952

New Contributors

@RayRemnant made their first contribution in #2974

Full Changelog: nestjs/nest-cli@11.0.5...11.0.6

`v11.0.5`

Compare Source

feat(swc): add reload application when compiling to mjs (d866d77)

`v11.0.4`

Compare Source

chore(deps): allow any schematics package newer or eq to v11 (5d79adf)
chore(deps): update dependency @swc/core to v1.10.17 (887fa7d)

`v11.0.3`

Compare Source

fix(deps): update angular-cli monorepo to v19.1.7 (c8c8904)
fix(deps): update dependency ansis to v3.15.0 (72d59e1)
fix(deps): update dependency @inquirer/prompts to v7.3.2 (ea34a79)
fix(deps): update dependency webpack to v5.98.0 (24014fc)

`v11.0.2`

Compare Source

fix: swc compiler does not watch files (8aaa9df)

`v11.0.1`

Compare Source

fix: pass matched paths to chokidar watcher (watchAssets) (bd96064)
- issue ref: nestjs/nest#14463

`v11.0.0`

Compare Source

Migration guide: https://docs.nestjs.com/migration-guide

Features and improvements

feat(schematics): list schematics from extended collections #2096
feat: nest build --all flag #2312
feat: add flag to disable shell mode for nest start --watch #2522
feat!: drop uncommon variants of nest cli config file name #2769
feat: add support for --env-file flag #2818

Dependencies

fix(deps): update dependency glob to v11 #2788
chore/upgrade inquirer package #2718
fix(deps): update dependency chokidar to v4 #2734
fix(deps): update angular-cli monorepo to v19 #2811

nestjs/passport (@nestjs/passport)

`v11.0.5`

Compare Source

fix: exclude last argument only if its of type function (cb) (1a7123a)

`v11.0.4`

Compare Source

fix: remove redundant exclude unknown type (7a7ea87)
fix: strategy ctor overload type extractor generic. Solves #1857 (99a3245)

`v11.0.3`

Compare Source

fix: use all ctor params type to include overloads #1857 (84c8838)

`v11.0.2`

Compare Source

`v11.0.1`

Compare Source

`v11.0.0`

Compare Source

v11.0.0

#1641
#1439

nestjs/nest (@nestjs/platform-express)

`v11.1.28`

Compare Source

`v11.1.27`

Compare Source

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in #17131
fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in #17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

`v11.1.26`

Compare Source

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in #17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

`v11.1.25`

Compare Source

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in #17024
fix(core): register SSE close listener before async setup by @fallintoplace in #17018
fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in #17094

New Contributors

@fallintoplace made their first contribution in #17018
@DucMinhNe made their first contribution in #17085
@iambeaukim made their first contribution in #17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

`v11.1.24`

Compare Source

v11.1.24 (2026-05-25)

Bug fixes

core
- #17009 fix(core): reset dependency-tree cache on metadata changes (@puneetdixit200)

Enhancements

core
- #16997 feat(core): warn on late websocket adapter registration (@hbinhng)

Dependencies

platform-ws
- #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@dependabot[bot])

Committers: 2

Nguyễn Hải Bình (@hbinhng)
Puneet Dixit (@puneetdixit200)

`v11.1.23`

Compare Source

v11.1.23 (2026-05-21)

Bug fixes

core
- #16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

Kamil Mysliwiec (@kamilmysliwiec)

`v11.1.22`

Compare Source

v11.1.22 (2026-05-21)

Bug fixes

core
- #16993 fix(core): inflight request injection bug #16989 (@kamilmysliwiec)

Enhancements

core
- #16967 fix(core): identify decorator type in invalid-class-module error (@HarrierOnChain)

Committers: 2

Harrier (@HarrierOnChain)
Kamil Mysliwiec (@kamilmysliwiec)

`v11.1.21`

Compare Source

v11.1.21 (2026-05-14)

Bug fixes

core
- #16948 fix(core): settle skipped provider initialization (@yudin-s)

Committers: 1

Serge Yudin (@yudin-s)

`v11.1.20`

Compare Source

v11.1.20 (2026-05-13)

Bug fixes

core, testing
- #16939 fix(core): fix deeply nested transient providers resolution (@kamilmysliwiec)
core
- #16861 fix(core): fix @Sse losing events on complete (@MatthiasBrehmer)
- #16753 fix(core): defer sse writehead until after lifecycle completes (@jkalberer)
- #16782 fix(core): use strict null check for SSE message id (@burhanharoon)
microservices
- #16850 fix(microservices): ServerRMQ crashes at boot when @MessagePattern(undefined) is combined with wildcards: true (@lavieennoir)
common
- #16845 fix(common): accept zero timestamp in parse date pipe (@Mysh3ll)
platform-socket.io
- #16742 fix(socket.io): Deduplicate disconnect listener in bindMessageHandlers (@fru1tworld)

Enhancements

microservices
- #16676 feat(microservices): add return buffers option for binary data (@Forceres)
- #16826 feat(microservices): handle rmq blocked/unblocked connection events (@thisalihassan)
common
- #16902 fix(common): filetype validator buffer message (@QusaiAlbonni)
platform-express
- #16844 feat(platform-express): add defParamCharset to MulterOptions (@starnayuta)

Dependencies

platform-ws
- #16941 chore(deps): bump ws from 8.20.0 to 8.20.1 (@dependabot[bot])

Committers: 13

Ali Hassan (@thisalihassan)
Burhan Haroon⚡ (@burhanharoon)
Dmytro Khyzhniak (@lavieennoir)
Harsh Rathod (@harshrathod50)
IlyaCredo (@Forceres)
Kamil Mysliwiec (@kamilmysliwiec)
Mysh3ll (@Mysh3ll)
@MatthiasBrehmer
@QusaiAlbonni
@jkalberer
@pazaderey
fru1tworld (@fru1tworld)
starnayuta (@starnayuta)

`v11.1.19`

Compare Source

v11.1.19 (2026-04-13)

Bug fixes

microservices
- #16762 fix(microservices): use backing field for consumer CRASH event listener (@burhanharoon)
- #16764 fix(microservices): prevent stack overflow in jsonsocket.handledata() (@kamilmysliwiec)

Committers: 2

Burhan Haroon⚡ (@burhanharoon)
Kamil Mysliwiec (@kamilmysliwiec)

`v11.1.18`

Compare Source

v11.1.18 (2026-04-03)

Bug fixes

microservices
- #16675 fix(microservices): preserve packet headers in nats serializer (@wwenrr)
core
- #16683 fix(core): prevent injector hang when design:paramtypes is missing (@Youmoo)
- #16637 fix(core): dependency injection edge case with moduleref.create (@JakobStaudinger)
- #16686 fix(core): sanitize sse message

Dependencies

core, platform-express, platform-fastify
- #16679 fix(deps): update dependency path-to-regexp to v8.4.2 (@renovate[bot])
platform-fastify
- #16623 fix(deps): update dependency fastify to v5.8.4 (@renovate[bot])
platform-ws
- #16618 chore(deps): bump ws from 8.19.0 to 8.20.0 (@dependabot[bot])
common
- #16619 chore(deps): bump file-type from 21.3.3 to 21.3.4 (@dependabot[bot])

Committers: 6

Ankit San (@ankitbelal)
Jakob Staudinger (@JakobStaudinger)
Kamil Mysliwiec (@kamilmysliwiec)
Krishna Chaitanya (@Krishnachaitanyakc)
MK (@wwenrr)
youmoo (@Youmoo)

`v11.1.17`

Compare Source

v11.1.17 (2026-03-16)

Enhancements

microservices
- #16218 feat(microservices): add redis driver identification (@vchomakov)

Bugs

platform-fastify
- auto-run middleware for HEAD requests as fastify redirects them to GET handlers (effectively skipping middleware execution) cbdf737 (@kamilmysliwiec)

Dependencies

common
- #16567 fix(deps): update dependency file-type to v21.3.2 (@renovate[bot])
platform-fastify
- #16533 fix(deps): update dependency fastify to v5.8.2 (@renovate[bot])

Committers: 3

Rohan Santhosh Kumar (@Rohan5commit)
Vasil Chomakov (@vchomakov)
Kamil Mysliwiec (@kamilmysliwiec)

`v11.1.16`

Compare Source

v11.1.16 (2026-03-05)

Bug fixes

microservices
- #16506 fix(microservices): fix double callback when isdisposed or err is truthy (@LhonRafaat)

Dependencies

platform-express
- #16507 fix(deps): update dependency multer to v2.1.1 (@renovate[bot])

Committers: 2

Lhon (@LhonRafaat)
Shahnoor Mujawar (@shahnoormujawar)

`v11.1.15`

Compare Source

What's Changed

fix(microservices): if indexOf return 0 will if will be falsy by @cuiweixie in #16401
fix(microservices): introuduce max pattern depth and object complexity by @kamilmysliwiec in #16402
chore(@nestjs/core): allow override for initializeWildcardHandlersIfE… by @StNekroman in #16468
chore(deps): update dependency @fastify/middie to v9.2.0 [security] by @renovate[bot] in #16472
fix(deps): update dependency multer to v2.1.0 [security] by @renovate[bot] in #16474

New Contributors

@cuiweixie made their first contribution in #16401
@StNekroman made their first contribution in #16468

Full Changelog: nestjs/nest@v11.1.14...v11.1.15

`v11.1.14`

Compare Source

v11.1.14 (2026-02-17)

Bug fixes

platform-fastify
- #16384 fix(fastify): fastify middleware bypass cve (@kamilmysliwiec)
common
- #16307 fix: logger print invalid context when no stack trace provided (@JulienDuf)

Enhancements

common
- #16314 fix(common): change requestOrigin type (@SpencerKaiser)

Committers: 5

Julien Dufresne (@JulienDuf)
Kamil Mysliwiec (@kamilmysliwiec)
Mykhailo Skrypsky (@mixator)
Spencer Kaiser (@SpencerKaiser)
조수민 (@suuuuuuminnnnnn)

`v11.1.13`

Compare Source

v11.1.13 (2026-02-03)

Bug fixes

common
- #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

microservices
- #16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)
- #16262 Feat/microservices configurable max buffer size (@jobnow)
common
- #16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

platform-fastify
- #16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])
platform-express
- #16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

Lee Donghyun (@devizi0)
Mykhailo Skrypsky (@mixator)
Neo (@chojs23)
Praveen Somasundaram (@som14062005)
Ricardo Gomes (@jobnow)
조수민 (@suuuuuuminnnnnn)

`v11.1.12`

Compare Source

v11.1.12 (2026-01-15)

Bug fixes

common
- #16187 fix(common): regression in loading file-type under Windows OS (@iamkanguk97)

Dependencies

platform-ws
- #16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@dependabot[bot])
common
- #16155 fix(deps): update dependency file-type to v21.3.0 (@renovate[bot])
platform-fastify
- #16154 fix(deps): update dependency find-my-way to v9.4.0 (@renovate[bot])

Committers: 3

Antonio Tripodi (@Tony133)
KANGUK LEE (@iamkanguk97)
@miso-kyoungminkim

`v11.1.11`

Compare Source

v11.1.11 (2025-12-29)

Bug fixes

platform-fastify
- #16135 fix(platform-fastify): middie bypassing through decoded chars (@kamilmysliwiec)
core
- #16133 fix(core): add missing catch handler for forward-ref provider resolution (@coti-z)

Dependencies

platform-socket.io
- #16125 fix(deps): update dependency socket.io to v4.8.3 (@renovate[bot])
- #16114 chore(deps): bump socket.io from 4.8.1 to 4.8.2 (@dependabot[bot])
platform-fastify
- #16130 fix(deps): update dependency @fastify/static to v9 (@renovate[bot])
common
- #16127 chore(deps): bump file-type from 21.1.1 to 21.2.0 (@dependabot[bot])

Committers: 3

Himanshu Gupta (@manureja64)
Kamil Mysliwiec (@kamilmysliwiec)
coti (@coti-z)

`v11.1.10`

Compare Source

v11.1.10 (2025-12-22)

Bug fixes

core
- #16098 fix(core): instantiate nested transient providers in static context (@mag123c)
- #16005 fix(core): resolve all providers when using resolve() with each option (@malkovitc)
microservices
- #16072 fix(microservices): fix grpc stream method return type (@shash-hq)
common
- #16077 fix(common): resolve file-type path explicitly (@shash-hq)
- #16013 fix(common): Support fallbackToMimetype without buffer (@chenjieya)

Enhancements

common
- #16100 fix(common): improve error handling in FileTypeValidator (@malkovitc)
- #16060 feat(common): add message property to file type validator (@Jo-Minseok)
- #16079 fix: enhance ValidationPipe (@liu-jin-yi)
core
- #15721 feat(core): add Promise support for SSE handlers (@pythonjsgo)
microservices
- #15975 feat(microservices): add keepalive support for server side (@OlegStrokan)
common, core
- #15986 feat(core): add option for async logger compatibility (@mag123c)

Dependencies

platform-fastify
- #16041 fix(deps): update dependency @fastify/cors to v11.2.0 (@renovate[bot])
platform-express
- #16002 fix(deps): update dependency express to v5.2.1 (@renovate[bot])
common
- #15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@dependabot[bot])

Committers: 11

Alexander (@pythonjsgo)
J_Coder (@Jo-Minseok)
Luke Son (@KAPUIST)
Oleh Strokan (@OlegStrokan)
Praveen Somasundaram (@som14062005)
Shashank (@shash-hq)
@chenjieya
@giorgikakauridze
@mag123c
chernomortsev evgeny (@malkovitc)
liu-jin-yi (@liu-jin-yi)

`v11.1.9`

Compare Source

v11.1.9 (2025-11-14)

Bug fixes

core
- #15865 fix(core): make get() throw for implicitly request-scoped trees (@JoeNutt)

Enhancements

common
- #15863 feat(common): add method options to @sse decorator (@TomerSteinberg)

Dependencies

platform-fastify
- #15899 chore(deps): bump fastify from 5.6.1 to 5.6.2 (@dependabot[bot])

Committers: 4

Rami (@JoeNutt)
Rhynel Algopera (@dev-rhynel)
Tomer Steinberg (@TomerSteinberg)
WuMingDao (@WuMingDao)

`v11.1.8`

Compare Source

v11.1.8 (2025-10-27)

Bug fixes

core
- [#15815](https://

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-01-16T13:10:38Z

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
❌ ACTION	actionlint	6		1	0	0.27s
✅ BASH	bash-exec	3		0	0	0.01s
❌ BASH	shellcheck	3		1	0	0.03s
✅ BASH	shfmt	3	0	0	0	0.03s
✅ COPYPASTE	jscpd	yes		no	no	3.71s
❌ DOCKERFILE	hadolint	2		1	0	0.36s
✅ EDITORCONFIG	editorconfig-checker	159		0	0	0.8s
✅ JSON	jsonlint	18		0	0	0.19s
✅ JSON	npm-package-json-lint	yes		no	no	0.49s
✅ JSON	prettier	18	0	0	0	1.84s
❌ JSON	v8r	18		1	0	11.53s
⚠️ MARKDOWN	markdownlint	2	1	73	0	1.6s
❌ MARKDOWN	markdown-link-check	2		5	0	20.72s
✅ MARKDOWN	markdown-table-formatter	2	1	0	0	0.33s
❌ REPOSITORY	checkov	yes		5	no	17.43s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
❌ REPOSITORY	grype	yes		42	no	30.2s
✅ REPOSITORY	secretlint	yes		no	no	0.79s
✅ REPOSITORY	syft	yes		no	no	7.0s
⚠️ REPOSITORY	trivy	yes		1	no	15.64s
✅ REPOSITORY	trivy-sbom	yes		no	no	6.39s
✅ REPOSITORY	trufflehog	yes		no	no	16.56s
❌ SPELL	cspell	161		5	0	5.95s
❌ SPELL	lychee	33		12	0	2.57s
✅ TYPESCRIPT	prettier	108	36	0	0	4.57s
❌ TYPESCRIPT	ts-standard	108	108	1	0	28.58s
✅ YAML	prettier	13	0	0	0	1.94s
✅ YAML	v8r	13		0	0	6.18s
❌ YAML	yamllint	13		22	0	5.69s

See detailed report in MegaLinter reports

kodiakhq · 2025-01-17T09:20:19Z

This PR currently has a merge conflict. Please resolve this and then re-add the automerge label.

gitguardian · 2025-01-20T08:25:30Z

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
While these secrets were previously flagged, we no longer have a reference to the
specific commits where they were detected. Once a secret has been leaked into a git
repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.

^{_{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}}

github-actions · 2026-03-03T19:48:34Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ COPYPASTE	jscpd	yes		no	no	0.76s
✅ EDITORCONFIG	editorconfig-checker	2		0	0	0.04s
✅ JSON	jsonlint	1		0	0	0.46s
✅ JSON	npm-package-json-lint	yes		no	no	0.68s
⚠️ JSON	prettier	1	0	1	0	0.39s
✅ JSON	v8r	1		0	0	6.95s
❌ REPOSITORY	betterleaks	yes		2	no	1.31s
✅ REPOSITORY	checkov	yes		no	no	22.31s
❌ REPOSITORY	devskim	yes		44	no	171.75s
✅ REPOSITORY	dustilock	yes		no	no	0.92s
✅ REPOSITORY	git_diff	yes		no	no	0.03s
❌ REPOSITORY	grype	yes		73	no	68.9s
❌ REPOSITORY	kingfisher	yes		1	no	9.86s
❌ REPOSITORY	osv-scanner	yes		73	no	2.43s
❌ REPOSITORY	secretlint	yes		1	no	1.2s
✅ REPOSITORY	syft	yes		no	no	5.45s
⚠️ REPOSITORY	trivy	yes		1	no	12.46s
✅ REPOSITORY	trivy-sbom	yes		no	no	5.27s
✅ REPOSITORY	trufflehog	yes		no	no	3.59s
✅ SPELL	cspell	3		0	0	2.72s
❌ SPELL	lychee	2		1	0	0.82s
✅ YAML	prettier	1	0	0	0	0.39s
✅ YAML	v8r	1		0	0	1.06s
❌ YAML	yamllint	1		4	0	4.87s

Detailed Issues

❌ REPOSITORY / betterleaks - 2 errors

○
  ○
  ●
  ○  betterleaks 1.6.0

┌─generic-api-key──○
│
│ 63 │           POSTGRES_PASSWORD: REDACTED
│    │                              ^^^^^^^^
│
│ attributes:
│   path .......... .github/workflows/ci.yml
│   resource ...... fs.content
└○


┌─generic-api-key──○
│
│ 9 │ SECRET=REDACTED
│   │        ^^^^^^^^
│
│ attributes:
│   path .......... .env.example
│   resource ...... fs.content
└○


9:04PM INF scanned ~417723 bytes (417.72 KB) in 1.2s
9:04PM WRN leaks found: 2

❌ REPOSITORY / devskim - 44 errors

set":795,"charLength":4},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.ts"},"region":{"startLine":32,"startColumn":27,"endLine":32,"endColumn":31,"charOffset":773,"charLength":4,"snippet":{"text":"sha1","rendered":{"text":"sha1","markdown":"`sha1`"}},"sourceLanguage":"typescript"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.ts"},"replacements":[{"deletedRegion":{"charOffset":773,"charLength":4},"insertedContent":{"text":"sha512"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.ts"},"replacements":[{"deletedRegion":{"charOffset":773,"charLength":4},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.ts"},"region":{"startLine":32,"startColumn":8,"endLine":32,"endColumn":12,"charOffset":754,"charLength":4,"snippet":{"text":"sha1","rendered":{"text":"sha1","markdown":"`sha1`"}},"sourceLanguage":"typescript"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.ts"},"replacements":[{"deletedRegion":{"charOffset":754,"charLength":4},"insertedContent":{"text":"sha512"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.ts"},"replacements":[{"deletedRegion":{"charOffset":754,"charLength":4},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS126858","level":"error","message":{"text":"Weak/Broken Hash Algorithm"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.spec.ts"},"region":{"startLine":20,"startColumn":22,"endLine":20,"endColumn":26,"charOffset":568,"charLength":4,"snippet":{"text":"sha1","rendered":{"text":"sha1","markdown":"`sha1`"}},"sourceLanguage":"typescript"}}}],"fixes":[{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.spec.ts"},"replacements":[{"deletedRegion":{"charOffset":568,"charLength":4},"insertedContent":{"text":"sha512"}}]}]},{"description":{"text":"A weak or broken hash algorithm was detected."},"artifactChanges":[{"artifactLocation":{"uri":"src/auth/providers/pwned-password.provider.spec.ts"},"replacements":[{"deletedRegion":{"charOffset":568,"charLength":4},"insertedContent":{"text":"sha256"}}]}]}],"properties":{"tags":["Cryptography.BannedHashAlgorithm"],"DevSkimSeverity":"Critical","DevSkimConfidence":"High"}},{"ruleId":"DS162092","level":"note","message":{"text":"Do not leave debug code in production"},"locations":[{"physicalLocation":{"artifactLocation":{"uri":"test/auth.end2end.spec.ts"},"region":{"startLine":188,"startColumn":20,"endLine":188,"endColumn":29,"charOffset":5337,"charLength":9,"snippet":{"text":"localhost","rendered":{"text":"localhost","markdown":"`localhost`"}},"sourceLanguage":"typescript"}}}],"properties":{"tags":["Hygiene.Network.AccessingLocalhost"],"DevSkimSeverity":"ManualReview","DevSkimConfidence":"High"}}],"columnKind":"utf16CodeUnits"}]}

(Truncated to last 4000 characters out of 313214)

❌ REPOSITORY / grype - 73 errors

SA-2mjp-6q6p-2qxm  Medium    0.5% (39th)  0.3    
undici            6.23.0     6.24.0    npm   GHSA-2mjp-6q6p-2qxm  Medium    0.5% (39th)  0.3    
undici            7.22.0     7.24.0    npm   GHSA-2mjp-6q6p-2qxm  Medium    0.5% (39th)  0.3    
ajv               8.12.0     8.18.0    npm   GHSA-2g4f-4pwh-qvx6  Medium    0.5% (38th)  0.3    
brace-expansion   1.1.11     1.1.13    npm   GHSA-f886-m6hf-6m8v  Medium    0.4% (34th)  0.2    
brace-expansion   2.0.1      2.0.3     npm   GHSA-f886-m6hf-6m8v  Medium    0.4% (34th)  0.2    
brace-expansion   5.0.4      5.0.5     npm   GHSA-f886-m6hf-6m8v  Medium    0.4% (34th)  0.2    
undici            6.14.1     6.23.0    npm   GHSA-g9mf-h72j-4rw9  Medium    0.4% (35th)  0.2    
js-yaml           3.14.1     3.14.2    npm   GHSA-mh29-5h37-fv8m  Medium    0.4% (33rd)  0.2    
js-yaml           4.1.0      4.1.1     npm   GHSA-mh29-5h37-fv8m  Medium    0.4% (33rd)  0.2    
picomatch         2.3.1      2.3.2     npm   GHSA-3v7f-55p6-f55p  Medium    0.4% (33rd)  0.2    
undici            7.22.0     7.28.0    npm   GHSA-pr7r-676h-xcf6  Medium    0.4% (29th)  0.2    
uuid              9.0.1      11.1.1    npm   GHSA-w5hq-g745-h8pq  Medium    0.3% (25th)  0.2    
qs                6.15.0     6.15.2    npm   GHSA-q8mj-m7cp-5q26  Medium    0.4% (27th)  0.2    
lodash            4.17.21    4.18.0    npm   GHSA-f23m-r3pf-42rh  Medium    0.3% (23rd)  0.2    
lodash            4.17.23    4.18.0    npm   GHSA-f23m-r3pf-42rh  Medium    0.3% (23rd)  0.2    
lodash-es         4.17.21    4.18.0    npm   GHSA-f23m-r3pf-42rh  Medium    0.3% (23rd)  0.2    
diff              4.0.2      4.0.4     npm   GHSA-73rr-hh4g-fpgx  Low       0.6% (42nd)  0.2    
brace-expansion   5.0.4      5.0.6     npm   GHSA-jxxr-4gwj-5jf2  Medium    0.3% (19th)  0.2    
jws               3.2.2      3.2.3     npm   GHSA-869p-cjfg-cm3x  High      0.2% (9th)   0.1    
undici            6.14.1     6.27.0    npm   GHSA-p88m-4jfj-68fv  Medium    0.3% (17th)  0.1    
undici            6.23.0     6.27.0    npm   GHSA-p88m-4jfj-68fv  Medium    0.3% (17th)  0.1    
undici            7.22.0     7.28.0    npm   GHSA-p88m-4jfj-68fv  Medium    0.3% (17th)  0.1    
js-yaml           3.14.1     3.15.0    npm   GHSA-h67p-54hq-rp68  Medium    0.3% (17th)  0.1    
js-yaml           4.1.0      4.2.0     npm   GHSA-h67p-54hq-rp68  Medium    0.3% (17th)  0.1    
@nestjs/core      10.4.22    11.1.18   npm   GHSA-36xv-jgw5-4q75  Medium    0.2% (14th)  0.1    
undici            6.14.1     6.24.0    npm   GHSA-4992-7rv2-5pvq  Medium    0.3% (17th)  0.1    
undici            6.23.0     6.24.0    npm   GHSA-4992-7rv2-5pvq  Medium    0.3% (17th)  0.1    
undici            7.22.0     7.24.0    npm   GHSA-4992-7rv2-5pvq  Medium    0.3% (17th)  0.1    
brace-expansion   1.1.11     1.1.12    npm   GHSA-v6h2-p8h4-qcjw  Low       0.5% (36th)  0.1    
brace-expansion   2.0.1      2.0.2     npm   GHSA-v6h2-p8h4-qcjw  Low       0.5% (36th)  0.1    
undici            6.14.1     6.19.2    npm   GHSA-3g92-w8c5-73pq  Low       0.5% (37th)  0.1    
undici            6.14.1     6.27.0    npm   GHSA-g8m3-5g58-fq7m  Low       0.2% (15th)  < 0.1  
undici            6.23.0     6.27.0    npm   GHSA-g8m3-5g58-fq7m  Low       0.2% (15th)  < 0.1  
undici            7.22.0     7.28.0    npm   GHSA-g8m3-5g58-fq7m  Low       0.2% (15th)  < 0.1  
undici            6.14.1     6.21.2    npm   GHSA-cxrh-j4jr-qwg3  Low       0.3% (18th)  < 0.1  
undici            6.14.1     6.27.0    npm   GHSA-35p6-xmwp-9g52  Low       0.2% (13th)  < 0.1  
undici            6.23.0     6.27.0    npm   GHSA-35p6-xmwp-9g52  Low       0.2% (13th)  < 0.1  
undici            7.22.0     7.28.0    npm   GHSA-35p6-xmwp-9g52  Low       0.2% (13th)  < 0.1  
@babel/core       7.27.4     7.29.6    npm   GHSA-4x5r-pxfx-6jf8  Low       0.1% (1st)   < 0.1  
follow-redirects  1.15.9     1.16.0    npm   GHSA-r4q5-vmmm-2653  Medium    N/A          N/A
[0068] ERROR discovered vulnerabilities at or above the severity threshold

(Truncated to last 4000 characters out of 7393)

❌ REPOSITORY / kingfisher - 1 error

New Kingfisher release 1.107.0 available
 INFO kingfisher: Launching with 8 concurrent scan jobs. Use --num-jobs to override.
 INFO kingfisher::rule_loader: Loaded 925 rules
 INFO kingfisher::scanner::runner: Using Vectorscan rule cache cache_dir=/github/home/.cache/kingfisher/rule-cache
 INFO kingfisher::scanner::runner: Starting secret validation phase...
POSTGRES URL WITH HARDCODED PASSWORD => [KINGFISHER.POSTGRES.1]
 |Finding.......: [REDACTED:781857df]
 |Fingerprint...: 2034115162828868254
 |Confidence....: medium
 |Entropy.......: 3.87
 |Validation....: Inactive Credential
 |__Response....: Postgres connection failed.
 |Language......: YAML
 |Line Num......: 24
 |Path..........: ./.devcontainer/docker-compose.yml


==========================================
Scan Summary:
==========================================
 |Findings....................: 1
 |__Successful Validations....: 0
 |__Failed Validations........: 1
 |__Skipped Validations.......: 0
 |Rules Applied...............: 925
 |__Blobs Scanned.............: 227
 |Bytes Scanned...............: 8.19 MiB
 |Scan Duration...............: 102ms 811us 566ns
 |Scan Date...................: 2026-07-16 21:05:03 +00:00
 |Kingfisher Version..........: 1.104.0
 |__Latest Version............: 1.107.0
New Kingfisher release 1.107.0 available

❌ SPELL / lychee - 1 error

📝 Summary
---------------------
🔍 Total............6
🔗 Unique...........4
✅ Successful.......1
⏳ Timeouts.........0
🔀 Redirected.......1
👻 Excluded.........4
❓ Unknown..........0
🚫 Errors...........1
⛔ Unsupported......1

Errors in pnpm-lock.yaml
[403] https://www.npmjs.com/support (at 2453:65) | Rejected status code: 403 Forbidden

Hint: Followed 1 redirect. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

❌ REPOSITORY / osv-scanner - 73 errors

.yaml |
| https://osv.dev/GHSA-c76h-2ccp-4975 | 6.8  | npm       | undici           | 6.14.1  | 6.21.1        | pnpm-lock.yaml |
| https://osv.dev/GHSA-cxrh-j4jr-qwg3 | 3.1  | npm       | undici           | 6.14.1  | 6.21.2        | pnpm-lock.yaml |
| https://osv.dev/GHSA-f269-vfmq-vjvj | 7.5  | npm       | undici           | 6.14.1  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-g8m3-5g58-fq7m | 3.7  | npm       | undici           | 6.14.1  | 6.27.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-g9mf-h72j-4rw9 | 5.9  | npm       | undici           | 6.14.1  | 6.23.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-p88m-4jfj-68fv | 5.9  | npm       | undici           | 6.14.1  | 6.27.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-v9p9-hfj2-hcw8 | 7.5  | npm       | undici           | 6.14.1  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-vrm6-8vpv-qv8q | 7.5  | npm       | undici           | 6.14.1  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-vxpw-j846-p89q | 7.5  | npm       | undici           | 6.14.1  | 6.27.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-2mjp-6q6p-2qxm | 6.5  | npm       | undici           | 6.23.0  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-35p6-xmwp-9g52 | 3.7  | npm       | undici           | 6.23.0  | 6.27.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-4992-7rv2-5pvq | 4.6  | npm       | undici           | 6.23.0  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-f269-vfmq-vjvj | 7.5  | npm       | undici           | 6.23.0  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-g8m3-5g58-fq7m | 3.7  | npm       | undici           | 6.23.0  | 6.27.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-p88m-4jfj-68fv | 5.9  | npm       | undici           | 6.23.0  | 6.27.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-v9p9-hfj2-hcw8 | 7.5  | npm       | undici           | 6.23.0  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-vrm6-8vpv-qv8q | 7.5  | npm       | undici           | 6.23.0  | 6.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-vxpw-j846-p89q | 7.5  | npm       | undici           | 6.23.0  | 6.27.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-2mjp-6q6p-2qxm | 6.5  | npm       | undici           | 7.22.0  | 7.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-35p6-xmwp-9g52 | 3.7  | npm       | undici           | 7.22.0  | 7.28.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-4992-7rv2-5pvq | 4.6  | npm       | undici           | 7.22.0  | 7.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-f269-vfmq-vjvj | 7.5  | npm       | undici           | 7.22.0  | 7.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-g8m3-5g58-fq7m | 3.7  | npm       | undici           | 7.22.0  | 7.28.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-p88m-4jfj-68fv | 5.9  | npm       | undici           | 7.22.0  | 7.28.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-phc3-fgpg-7m6h | 5.9  | npm       | undici           | 7.22.0  | 7.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-pr7r-676h-xcf6 | 5.9  | npm       | undici           | 7.22.0  | 7.28.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-v9p9-hfj2-hcw8 | 7.5  | npm       | undici           | 7.22.0  | 7.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-vrm6-8vpv-qv8q | 7.5  | npm       | undici           | 7.22.0  | 7.24.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-vxpw-j846-p89q | 7.5  | npm       | undici           | 7.22.0  | 7.28.0        | pnpm-lock.yaml |
| https://osv.dev/GHSA-w5hq-g745-h8pq | 7.5  | npm       | uuid             | 9.0.1   | 11.1.1        | pnpm-lock.yaml |
| https://osv.dev/GHSA-58qx-3vcg-4xpx | 4.4  | npm       | ws               | 8.18.1  | 8.20.1        | pnpm-lock.yaml |
| https://osv.dev/GHSA-96hv-2xvq-fx4p | 7.5  | npm       | ws               | 8.18.1  | 8.21.0        | pnpm-lock.yaml |
+-------------------------------------+------+-----------+------------------+---------+---------------+----------------+

(Truncated to last 4000 characters out of 9691)

❌ REPOSITORY / secretlint - 1 error

.devcontainer/docker-compose.yml
  24:21  error  [PostgreSQLConnection] found PostgreSQL connection string: ****************************************************  @secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-database-connection-string

.github/workflows/ci.yml
  89:24  error  [PostgreSQLConnection] found PostgreSQL connection string: *************************************************  @secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-database-connection-string
  95:24  error  [PostgreSQLConnection] found PostgreSQL connection string: *************************************************  @secretlint/secretlint-rule-preset-recommend > @secretlint/secretlint-rule-database-connection-string

✖ 3 problems (3 errors, 0 warnings, 0 infos)

❌ YAML / yamllint - 4 errors

pnpm-lock.yaml
  1:1       warning  missing document start "---"  (document-start)
  40:501    error    line too long (545 > 500 characters)  (line-length)
  10327:501 error    line too long (537 > 500 characters)  (line-length)
  10462:501 error    line too long (584 > 500 characters)  (line-length)

⚠️ JSON / prettier - 1 error

[error] Cannot find package 'prettier-plugin-toml' imported from noop.js

⚠️ REPOSITORY / trivy - 1 error

│        │                   │ 6.27.0, 7.28.0, 8.5.0                                   │ undici: undici: Weakening of cookie SameSite policy due to   │
│                 │                │          │        │                   │                                                         │ incorrect parsing of...                                      │
│                 │                │          │        │                   │                                                         │ https://avd.aquasec.com/nvd/cve-2026-11525                   │
│                 ├────────────────┤          │        │                   │                                                         ├──────────────────────────────────────────────────────────────┤
│                 │ CVE-2026-6733  │          │        │                   │                                                         │ undici: Undici: Response queue poisoning on reused           │
│                 │                │          │        │                   │                                                         │ keep-alive sockets can lead to...                            │
│                 │                │          │        │                   │                                                         │ https://avd.aquasec.com/nvd/cve-2026-6733                    │
├─────────────────┼────────────────┼──────────┤        ├───────────────────┼─────────────────────────────────────────────────────────┼──────────────────────────────────────────────────────────────┤
│ uuid            │ CVE-2026-41907 │ MEDIUM   │        │ 9.0.1             │ 11.1.1, 12.0.1, 13.0.1                                  │ uuid: uuid: Out-of-bounds write vulnerability impacts data   │
│                 │                │          │        │                   │                                                         │ integrity and confidentiality                                │
│                 │                │          │        │                   │                                                         │ https://avd.aquasec.com/nvd/cve-2026-41907                   │
└─────────────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────────────────────────────────────────────┴──────────────────────────────────────────────────────────────┘

.devcontainer/Dockerfile (dockerfile)
=====================================
Tests: 27 (SUCCESSES: 25, FAILURES: 2)
Failures: 2 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds-0002
────────────────────────────────────────


DS-0026 (LOW): Add HEALTHCHECK instruction in your Dockerfile
════════════════════════════════════════
You should add HEALTHCHECK instruction in your docker container images to perform the health check on running containers.

See https://avd.aquasec.com/misconfig/ds-0026
────────────────────────────────────────



Dockerfile (dockerfile)
=======================
Tests: 27 (SUCCESSES: 26, FAILURES: 1)
Failures: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds-0002
────────────────────────────────────────



📣 Notices:
  - Version 0.72.0 of Trivy is now available, current version is 0.71.2

To suppress version checks, run Trivy scans with the --skip-version-check flag

(Truncated to last 4000 characters out of 27366)

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository

kodiakhq · 2026-03-04T03:30:33Z

This PR currently has a merge conflict. Please resolve this and then re-add the automerge label.

renovate Bot added the automerge Auto merge PR with Kodiak label Jan 16, 2025

renovate Bot enabled auto-merge (rebase) January 16, 2025 13:08

kodiakhq Bot approved these changes Jan 16, 2025

View reviewed changes

renovate Bot force-pushed the renovate/major-nest-monorepo branch 3 times, most recently from 2e9acb8 to 3ead754 Compare January 17, 2025 09:18

kodiakhq Bot removed the automerge Auto merge PR with Kodiak label Jan 17, 2025

renovate Bot force-pushed the renovate/major-nest-monorepo branch 5 times, most recently from f1745b0 to 059a97d Compare January 20, 2025 08:25

renovate Bot force-pushed the renovate/major-nest-monorepo branch 13 times, most recently from 9dd67bf to 35fa0be Compare January 26, 2025 20:28

renovate Bot force-pushed the renovate/major-nest-monorepo branch 2 times, most recently from 95c0fad to a130a17 Compare January 27, 2025 21:15

renovate Bot force-pushed the renovate/major-nest-monorepo branch 13 times, most recently from 3ba2c43 to e67975f Compare February 16, 2025 01:45

renovate Bot force-pushed the renovate/major-nest-monorepo branch 14 times, most recently from d42b6fc to 2416ab4 Compare February 23, 2025 13:49

fix(deps): update nest monorepo to v11

e1720ea

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update nest monorepo to v11#1376

fix(deps): update nest monorepo to v11#1376
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-nest-monorepo

renovate Bot commented Jan 16, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Jan 16, 2025 •

edited

Loading

Uh oh!

kodiakhq Bot commented Jan 17, 2025

Uh oh!

gitguardian Bot commented Jan 20, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Mar 3, 2026 •

edited

Loading

Uh oh!

kodiakhq Bot commented Mar 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Jan 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

Features and improvements

Dependencies

v11.0.0

What's Changed

What's Changed

What's Changed

New Contributors

v11.1.24 (2026-05-25)

Bug fixes

Enhancements

Dependencies

Committers: 2

v11.1.23 (2026-05-21)

Bug fixes

Committers: 1

v11.1.22 (2026-05-21)

Bug fixes

Enhancements

Committers: 2

v11.1.21 (2026-05-14)

Bug fixes

Committers: 1

v11.1.20 (2026-05-13)

Bug fixes

Enhancements

Dependencies

Committers: 13

v11.1.19 (2026-04-13)

Bug fixes

Committers: 2

v11.1.18 (2026-04-03)

Bug fixes

Dependencies

Committers: 6

v11.1.17 (2026-03-16)

Enhancements

Bugs

Dependencies

Committers: 3

v11.1.16 (2026-03-05)

Bug fixes

Dependencies

Committers: 2

What's Changed

New Contributors

v11.1.14 (2026-02-17)

Bug fixes

Enhancements

Committers: 5

v11.1.13 (2026-02-03)

Bug fixes

Enhancements

Dependencies

Committers: 6

v11.1.12 (2026-01-15)

Bug fixes

Dependencies

Committers: 3

v11.1.11 (2025-12-29)

Bug fixes

Dependencies

renovate Bot commented Jan 16, 2025 •

edited

Loading