chore(deps-dev): Bump the dev-dependencies group across 1 directory with 16 updates by dependabot[bot] · Pull Request #35 · bymaxone/nest-auth

dependabot · 2026-06-29T11:30:32Z

Bumps the dev-dependencies group with 16 updates in the / directory:

Package	From	To
@nestjs/common	`11.1.24`	`11.1.27`
@nestjs/core	`11.1.24`	`11.1.27`
@nestjs/platform-express	`11.1.24`	`11.1.27`
@nestjs/testing	`11.1.24`	`11.1.27`
@nestjs/websockets	`11.1.24`	`11.1.27`
@typescript-eslint/eslint-plugin	`8.60.0`	`8.62.0`
@typescript-eslint/parser	`8.60.0`	`8.62.0`
eslint-import-resolver-typescript	`4.4.4`	`4.4.5`
eslint-plugin-prettier	`5.5.5`	`5.5.6`
eslint-plugin-security	`4.0.0`	`4.0.1`
globals	`17.6.0`	`17.7.0`
ioredis	`5.10.1`	`5.11.1`
next	`16.2.6`	`16.2.9`
react	`19.2.6`	`19.2.7`
@types/react	`19.2.15`	`19.2.17`
react-dom	`19.2.6`	`19.2.7`

Updates @nestjs/common from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/common's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
02f8041 chore(release): publish v11.1.25 release
1634915 test(common): Add unit tests for cli-colors utility
380bf5c Merge pull request #17058 from Se3do/test/extend-metadata
af4542b test(common): Add unit tests for assignCustomParameterMetadata
b67aea1 test(common): Add unit tests for extendArrayMetadata
e1e4014 test(common): Tighten throw assertions in validateModuleKeys spec
6b97771 test(common): Add unit tests for validateModuleKeys
Additional commits viewable in compare view

Updates @nestjs/core from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/core's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
5c5e9ba fix(core): sse async handlers teardown issue #17128
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
0f398fd test: fix broken unit test
d152eec fix(core): post sse endpoint empty response #17098
02f8041 chore(release): publish v11.1.25 release
e2ad4e2 Update package.json
396cf81 refactor(core): avoid duplicating sse intercept call
55cd699 fix(core): preserve deferred SSE handlers
Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/platform-express's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
02f8041 chore(release): publish v11.1.25 release
See full diff in compare view

Updates @nestjs/testing from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/testing's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
02f8041 chore(release): publish v11.1.25 release
See full diff in compare view

Updates @nestjs/websockets from 11.1.24 to 11.1.27

Release notes

Sourced from @nestjs/websockets's releases.

v11.1.27

What's Changed

fix(core): sse async handlers teardown issue by @kamilmysliwiec in nestjs/nest#17131

fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in nestjs/nest#17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

What's Changed

fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in nestjs/nest#17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

What's Changed

fix(microservices): reject pending Redis requests on close by @yudin-s in nestjs/nest#17024

fix(core): register SSE close listener before async setup by @fallintoplace in nestjs/nest#17018

fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in nestjs/nest#17094

New Contributors

@fallintoplace made their first contribution in nestjs/nest#17018

@DucMinhNe made their first contribution in nestjs/nest#17085

@iambeaukim made their first contribution in nestjs/nest#17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

Commits

660a124 chore(release): publish v11.1.27 release
aa5c4f1 chore: update readme and package.json
9ff83d5 chore(release): publish v11.1.26 release
02f8041 chore(release): publish v11.1.25 release
See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.60.0 to 8.62.0

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

🩹 Fixes

add "files" to rule-schema-to-typescript-types (#12441)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

8.61.1 (2026-06-15)

🩹 Fixes

eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)

eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)

eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)

eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)

eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)

❤️ Thank You

Anas @anasm266

Deftera @Deftera186

Kirk Waiblinger @kirkwaiblinger

lumir

Sarath Francis @sarathfrancis90

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

ast-spec: change type of UnaryExpression.prefix to always true (#12372)

ast-spec: tighten types of ArrowFunction, YieldExpression, TSTypePredicate (#12373)

... (truncated)

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

🩹 Fixes

eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)

eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)

eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)

eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)

eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)

❤️ Thank You

Anas @anasm266

Deftera @Deftera186

Kirk Waiblinger @kirkwaiblinger

lumir

Sarath Francis @sarathfrancis90

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.0 (2026-06-08)

🚀 Features

ast-spec: change type of UnaryExpression.prefix to always true (#12372)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Commits

54e2857 chore(release): publish 8.62.0
81e4c26 feat: remove redundant package.json "files" (#12444)
b784054 chore: use stableTypeOrdering compiler option (#12427)
aaad718 chore(release): publish 8.61.1
0cc8f35 fix(eslint-plugin): [no-unnecessary-template-expression] respect ECMAScript l...
6f269e2 fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] fix precedence b...
1b5d543 fix(eslint-plugin): [no-unnecessary-type-assertion] wrap object literal in pa...
565e666 fix(eslint-plugin): [no-unnecessary-type-assertion] avoid false positive for ...
204eabc fix(eslint-plugin): [consistent-indexed-object-style] do not remove comments ...
16a5b24 chore(release): publish 8.61.0
Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.60.0 to 8.62.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

🩹 Fixes

add "files" to rule-schema-to-typescript-types (#12441)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

8.61.1 (2026-06-15)

🩹 Fixes

eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)

eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)

eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)

eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)

eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)

❤️ Thank You

Anas @anasm266

Deftera @Deftera186

Kirk Waiblinger @kirkwaiblinger

lumir

Sarath Francis @sarathfrancis90

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

ast-spec: change type of UnaryExpression.prefix to always true (#12372)

ast-spec: tighten types of ArrowFunction, YieldExpression, TSTypePredicate (#12373)

... (truncated)

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.0 (2026-06-08)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.60.1 (2026-06-01)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

54e2857 chore(release): publish 8.62.0
81e4c26 feat: remove redundant package.json "files" (#12444)
aaad718 chore(release): publish 8.61.1
16a5b24 chore(release): publish 8.61.0
4f84a69 chore(release): publish 8.60.1
1849b53 chore: typecheck using tsgo (#12139)
See full diff in compare view

Updates eslint-import-resolver-typescript from 4.4.4 to 4.4.5

Release notes

Sourced from eslint-import-resolver-typescript's releases.

v4.4.5

Patch Changes

#473 32c61ab Thanks @leey0818! - fix: check tsconfig matching before using resolver

Changelog

Sourced from eslint-import-resolver-typescript's changelog.

4.4.5

Patch Changes

#473 32c61ab Thanks @leey0818! - fix: check tsconfig matching before using resolver

Commits

724c47d chore: release eslint-import-resolver-typescript (#480)
32c61ab fix: check tsconfig matching before using resolver (#473)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-import-resolver-typescript since your current version.

Updates eslint-plugin-prettier from 5.5.5 to 5.5.6

Release notes

Sourced from eslint-plugin-prettier's releases.

v5.5.6

Patch Changes

#791 b5c96a3 Thanks @JounQin! - chore: bump all (dev)Dependencies

Changelog

Sourced from eslint-plugin-prettier's changelog.

5.5.6

Patch Changes

#791 b5c96a3 Thanks @JounQin! - chore: bump all (dev)Dependencies

Commits

4f33ea5 chore: release eslint-plugin-prettier (#792)
4745b54 ci: declare workflow-level contents: read on 2 workflows (#790)
b5c96a3 chore: bump all (dev)Dependencies (#791)
e867680 chore(deps): update all dependencies (#766)
e8e2f7f chore: testing eslint v10 (#779)
ca076d9 chore: update dev dependencies (#780)
42e6369 build(deps): Bump the actions group with 2 updates (#778)
53ff214 Remove empty NPM_TOKEN from release.yml
See full diff in compare view

Updates eslint-plugin-security from 4.0.0 to 4.0.1

Release notes

Sourced from eslint-plugin-security's releases.

eslint-plugin-security: v4.0.1

4.0.1 (2026-06-12)

Bug Fixes

treat import.meta.dirname and import.meta.filename as static (#200) (74c97bb)

Changelog

Sourced from eslint-plugin-security's changelog.

4.0.1 (2026-06-12)

Bug Fixes

treat import.meta.dirname and import.meta.filename as static (#200) (74c97bb)

Commits

cb8645c chore: release 4.0.1 🚀 (#204)
74c97bb fix: treat import.meta.dirname and import.meta.filename as static (#200)
0b45f82 chore(deps-dev): bump shell-quote from 1.7.4 to 1.8.4 (#202)
954149a chore(deps-dev): bump handlebars from 4.7.7 to 4.7.9 (#198)
d5012b6 chore(deps-dev): bump picomatch from 2.3.1 to 2.3.2 (#197)
b53d8b4 chore(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#196)
7876750 chore(deps): bump minimatch (#194)
See full diff in compare view

Updates globals from 17.6.0 to 17.7.0

Release notes

Sourced from globals's releases.

v17.7.0

Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

Commits

a19670c 17.7.0
9611620 Update actions (#346)
33b75f9 Update globals (2026-06-22) (#345)
887dd52 Fix build script (#344)
See full diff in compare view

Updates ioredis from 5.10.1 to 5.11.1

Release notes

Sourced from ioredis's releases.

v5.11.1

5.11.1 (2026-06-04)

Bug Fixes

cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)

parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

v5.11.0

5.11.0 (2026-05-26)

Bug Fixes

prevent RangeError from string accumulation in pipeline (#2088) (defc077)

replace deprecated url.parse() with WHATWG URL API (#2081) (0021a45), closes redis/ioredis#1747

Features

add array commands, typings and tests (#2114) (baf68d6)

add increx command (#2115) (37d0695)

add Redis MSETEX support (#2111) (04a4615)

add typed GCRA command support and functional tests (#2094) (468a802)

add vector set command support (#2116) (b7b3def)

Add xnack command (#2103) (187d29b)

Add zinter zunion count (#2104) (0d510bb)

Implement TracingChannel support (#2089) (4760e0a)

Changelog

Sourced from ioredis's changelog.

5.11.1 (2026-06-04)

Bug Fixes

cluster: reconnect to nodes that restart without slot changes (#2096) (c84b2ee)

parse protocol-relative Redis URLs as TCP connections (#2125) (131ee24)

5.11.0 (2026-05-26)

Bug Fixes

prevent RangeError from string accumulation in pipeline (#2088) (defc077)

replace deprecated url.parse() with WHATWG URL API (#2081) (0021a45), closes redis/ioredis#1747

Features

add array commands, typings and tests (#2114) (baf68d6)

add increx command (#2115) (37d0695)

add Redis MSETEX support (#2111) (04a4615)

add typed GCRA command support and functional tests (#2094) (468a802)

add vector set command support (#2116) (b7b3def)

Add xnack command (#2103) (187d29b)

Add zinter zunion count (#2104) (0d510bb)

Implement TracingChannel support (#2089) (4760e0a)

Commits

fb224a7 chore(release): 5.11.1 [skip ci]
131ee24 fix: parse protocol-relative Redis URLs as TCP connections (#2125)
c84b2ee fix(cluster): reconnect to nodes that restart without slot changes (#2096)
1490432 chore(release): 5.11.0 [skip ci]
5359d4d refactor(utils): inline defaults and isArguments helpers (#2107)
b7b3def feat: add vector set command support (#2116)
faa53fd ci: update Node.js and Redis test matrix (#2119)
37d0695 feat: add increx command (#2115)
612ee9d chore: update Redis 8.8 test image to custom (#2118)
baf68d6 feat: add array commands, typings and tests (#2114)
Additional commits viewable in compare view

Updates next from 16.2.6 to 16.2.9

Release notes

Sourced from next's releases.

v16.2.9

Empty release to ensure next@latest points at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.

v16.2.8

Release with no changes in an attempt to fix next@latest pointing at a prerelease version.

v16.2.7

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Backport documentation fixes for v16.2 (#93804)

[backport] Patch playwright-core to resolve _finishedPromise on requestFailed (#93920)

[backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)

[backport] Fix catch-all router.query corruption with basePath + rewrites (#93917)

[backport] Encode non-ASCII characters in cache tags at construction (#93918)

[backport] Fix server action forwarding loop with middleware rewrites (#93919)

[backport] Turbopack: switch from base40 to base38 hash encoding (#93932)

[ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)

[backport] Fix "type: module" in project dir when using standalone or adapters (#94050)

[backport] Propagate adapter preferred regions (#94200)

[16.2.x] Don't drop FormData entries (#94240)

[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS config resolution (#94284)

Credits

Huge thanks to @eps1lon, @icyJoseph, @unstubbable, @mischnic, @bgw, @timneutkens, and @lukesandberg for helping!

Description has been truncated

…ith 16 updates Bumps the dev-dependencies group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.24` | `11.1.27` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.24` | `11.1.27` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.24` | `11.1.27` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.1.24` | `11.1.27` | | [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `11.1.24` | `11.1.27` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.0` | `8.62.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.60.0` | `8.62.0` | | [eslint-import-resolver-typescript](https://github.com/import-js/eslint-import-resolver-typescript) | `4.4.4` | `4.4.5` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.5` | `5.5.6` | | [eslint-plugin-security](https://github.com/eslint-community/eslint-plugin-security) | `4.0.0` | `4.0.1` | | [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.7.0` | | [ioredis](https://github.com/luin/ioredis) | `5.10.1` | `5.11.1` | | [next](https://github.com/vercel/next.js) | `16.2.6` | `16.2.9` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.15` | `19.2.17` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` | Updates `@nestjs/common` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/common) Updates `@nestjs/core` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/core) Updates `@nestjs/platform-express` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/platform-express) Updates `@nestjs/testing` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/testing) Updates `@nestjs/websockets` from 11.1.24 to 11.1.27 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.1.27/packages/websockets) Updates `@typescript-eslint/eslint-plugin` from 8.60.0 to 8.62.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.60.0 to 8.62.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/parser) Updates `eslint-import-resolver-typescript` from 4.4.4 to 4.4.5 - [Release notes](https://github.com/import-js/eslint-import-resolver-typescript/releases) - [Changelog](https://github.com/import-js/eslint-import-resolver-typescript/blob/master/CHANGELOG.md) - [Commits](import-js/eslint-import-resolver-typescript@v4.4.4...v4.4.5) Updates `eslint-plugin-prettier` from 5.5.5 to 5.5.6 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.5.5...v5.5.6) Updates `eslint-plugin-security` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/eslint-community/eslint-plugin-security/releases) - [Changelog](https://github.com/eslint-community/eslint-plugin-security/blob/main/CHANGELOG.md) - [Commits](eslint-community/eslint-plugin-security@eslint-plugin-security-v4.0.0...eslint-plugin-security-v4.0.1) Updates `globals` from 17.6.0 to 17.7.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.6.0...v17.7.0) Updates `ioredis` from 5.10.1 to 5.11.1 - [Release notes](https://github.com/luin/ioredis/releases) - [Changelog](https://github.com/redis/ioredis/blob/main/CHANGELOG.md) - [Commits](redis/ioredis@v5.10.1...v5.11.1) Updates `next` from 16.2.6 to 16.2.9 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.2.6...v16.2.9) Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 19.2.15 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom) --- updated-dependencies: - dependency-name: "@nestjs/common" dependency-version: 11.1.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@nestjs/core" dependency-version: 11.1.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@nestjs/platform-express" dependency-version: 11.1.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@nestjs/testing" dependency-version: 11.1.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@nestjs/websockets" dependency-version: 11.1.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.62.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.62.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: eslint-import-resolver-typescript dependency-version: 4.4.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: eslint-plugin-prettier dependency-version: 5.5.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: eslint-plugin-security dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: globals dependency-version: 17.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: ioredis dependency-version: 5.11.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: next dependency-version: 16.2.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@types/react" dependency-version: 19.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-06-29T11:31:58Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@16.2.9
	@typescript-eslint/parser@8.62.0
	@types/react@19.2.17
	@typescript-eslint/eslint-plugin@8.62.0
	react@19.2.7
	globals@17.7.0
	eslint-import-resolver-typescript@4.4.5
	eslint-plugin-security@4.0.1
	eslint-plugin-prettier@5.5.6
	ioredis@5.11.1
	react-dom@19.2.7
	@nestjs/common@11.1.27
	@nestjs/core@11.1.27
	@nestjs/websockets@11.1.27
	@nestjs/testing@11.1.27
	@nestjs/platform-express@11.1.27

View full report

socket-security · 2026-06-29T11:32:00Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/next@16.2.9` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@typescript-eslint/eslint-plugin` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → `npm/@typescript-eslint/eslint-plugin@8.62.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@typescript-eslint/eslint-plugin@8.62.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot · 2026-07-06T11:29:27Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Dependency updates label Jun 29, 2026

dependabot Bot closed this Jul 6, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-89c286fa6b branch July 6, 2026 11:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 16 updates - #35

chore(deps-dev): Bump the dev-dependencies group across 1 directory with 16 updates#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-89c286fa6b

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 29, 2026

Uh oh!

socket-security Bot commented Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

v11.1.27

What's Changed

v11.1.26

What's Changed

v11.1.25

What's Changed

New Contributors

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.61.1

8.61.1 (2026-06-15)

🩹 Fixes

❤️ Thank You

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

8.62.0 (2026-06-22)

🚀 Features

❤️ Thank You

8.61.1 (2026-06-15)

🩹 Fixes

❤️ Thank You

8.61.0 (2026-06-08)

🚀 Features

❤️ Thank You

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.61.1

8.61.1 (2026-06-15)

🩹 Fixes

❤️ Thank You

v8.61.0

8.61.0 (2026-06-08)

🚀 Features

8.62.0 (2026-06-22)

🚀 Features

❤️ Thank You

8.61.1 (2026-06-15)

8.61.0 (2026-06-08)

8.60.1 (2026-06-01)

v4.4.5

Patch Changes

dependabot Bot commented on behalf of github Jun 29, 2026 •

edited

Loading