chore(deps-dev): bump @nestjs/cli from 12.0.0 to 12.0.3

[dependabot]

Bumps @nestjs/cli from 12.0.0 to 12.0.3.

Release notes

Sourced from @​nestjs/cli's releases.

Release 12.0.3

• chore: flip the default (f194021a)

Release 12.0.2

• chore: observe prompt changes (3a2773d7)

Release 12.0.1

What's Changed

• fix(compiler): copy dotfiles when expanding a directory asset by @​micalevisk in nestjs/nest-cli#3523
• fix: honor preserveWatchOutput from tsconfig in watch mode by @​tmprar in nestjs/nest-cli#3565
• chore(configuration): add *.tsbuildinfo to default .gitignore template by @​saeed-ebrahimi-dev in nestjs/nest-cli#3543
• fix: show schematics as plain list on narrow terminals by @​biisal in nestjs/nest-cli#3548
• fix(cli): surface plugin load errors instead of "not compatible" by @​micalevisk in nestjs/nest-cli#3558
• feat(compiler): support native ESM for bundler config files by @​AnasX7 in nestjs/nest-cli#3553
• fix(compiler): resolve tsconfig absolute path by @​id6tm-mteterel in nestjs/nest-cli#3542
• fix(compiler): emit loadable path alias specifiers for esm by @​johnnyhuirilef in nestjs/nest-cli#3545

New Contributors

• @​tmprar made their first contribution in nestjs/nest-cli#3565
• @​saeed-ebrahimi-dev made their first contribution in nestjs/nest-cli#3543
• @​biisal made their first contribution in nestjs/nest-cli#3548
• @​AnasX7 made their first contribution in nestjs/nest-cli#3553
• @​johnnyhuirilef made their first contribution in nestjs/nest-cli#3545

Full Changelog: nestjs/nest-cli@12.0.0...12.0.1

Commits

• 23a97e8 chore(): release v12.0.3
• f194021 chore: flip the default
• 3ee9e0c chore(): release v12.0.2
• 0874d36 Merge branch 'master' of https://github.com/nestjs/nest-cli
• 3a2773d chore: observe prompt changes
• f265886 chore(deps): update dependency @​types/node to v25.9.7 (#3574)
• eb5f1c1 chore(deps): update dependency vitest to v5.0.1 (#3572)
• 60dee94 chore(deps): update dependency oxlint to v1.83.0 (#3570)
• db768aa chore(deps): update dependency @​rspack/core to v2.2.4 (#3569)
• 8d6b4ae chore(): release v12.0.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[clestons]

Verdict: APPROVE

Dependabot devDependency bump: @nestjs/cli ^12.0.0 → ^12.0.3 (build-tool only, transitively pulls newer @angular-devkit/*/@inquirer/* schematics deps, all dev-only).

Verified, not just read

• Installed, built (npm run build clean), full test suite: 40/40 suites, 526/526 tests pass on PR head.
• npm audit still reports the same 2 pre-existing high-severity multer findings — unrelated to this PR (this diff never touches @nestjs/platform-express or multer; same baseline debt present on main, already flagged with root cause and a verified fix in #364's review — not repeating it here).

R1a/R1b

Both clean — correctly triaged as a trivial, no-runtime-impact dev-tool bump.

---

[2-round] R1a/R1b: no findings, correctly so.

Self-assessment

• DeepSeek 0/2 useful (correctly quiet on a clean devDependency bump).

[clestons]

PR Review — #365

变更：@nestjs/cli 12.0.0 → 12.0.3 (devDependency)，仅 package.json/package-lock.json 版本号改动，无源码/逻辑/API 变更。

R1 (DeepSeek, 2-round)：无 finding。api_compat unchanged，无并发/状态/安全面改动。

CI：Build / Code Quality / CodeQL / Smart Contracts / Tests / Type Check / cla-check 全绿。Security Audit / CI Success 失败 — 这是仓库级预存问题（multer 2.2.0 npm audit 欠账，见 B6 阻塞记录），与本次版本号改动无关，不构成本 PR 的阻塞项。

结论：APPROVE。代码可以合，但本仓库当前处于 B6 零合并冻结期，实际合并需等待冻结解除。