v11.1.17

v11.1.17 (2026-03-16)

Enhancements

• microservices
  • #16218 feat(microservices): add redis driver identification (@vchomakov)

Bugs

• platform-fastify
  • auto-run middleware for HEAD requests as fastify redirects them to GET handlers (effectively skipping middleware execution) cbdf737 (@kamilmysliwiec)

Dependencies

• common
  • #16567 fix(deps): update dependency file-type to v21.3.2 (@renovate[bot])
• platform-fastify
  • #16533 fix(deps): update dependency fastify to v5.8.2 (@renovate[bot])

Committers: 3

• Rohan Santhosh Kumar (@Rohan5commit)
• Vasil Chomakov (@vchomakov)
• Kamil Mysliwiec (@kamilmysliwiec)

v11.1.16

v11.1.16 (2026-03-05)

Bug fixes

• microservices
  • #16506 fix(microservices): fix double callback when isdisposed or err is truthy (@LhonRafaat)

Dependencies

• platform-express
  • #16507 fix(deps): update dependency multer to v2.1.1 (@renovate[bot])

Committers: 2

• Lhon (@LhonRafaat)
• Shahnoor Mujawar (@shahnoormujawar)

v11.1.15

What's Changed

• fix(microservices): if indexOf return 0 will if will be falsy by @cuiweixie in #16401
• fix(microservices): introuduce max pattern depth and object complexity by @kamilmysliwiec in #16402
• chore(@nestjs/core): allow override for initializeWildcardHandlersIfE… by @StNekroman in #16468
• chore(deps): update dependency @fastify/middie to v9.2.0 [security] by @renovate[bot] in #16472
• fix(deps): update dependency multer to v2.1.0 [security] by @renovate[bot] in #16474

New Contributors

• @cuiweixie made their first contribution in #16401
• @StNekroman made their first contribution in #16468

Full Changelog: v11.1.14...v11.1.15

v11.1.14

v11.1.14 (2026-02-17)

Bug fixes

• platform-fastify
  • #16384 fix(fastify): fastify middleware bypass cve (@kamilmysliwiec)
• common
  • #16307 fix: logger print invalid context when no stack trace provided (@JulienDuf)

Enhancements

• common
  • #16314 fix(common): change requestOrigin type (@SpencerKaiser)

Committers: 5

• Julien Dufresne (@JulienDuf)
• Kamil Mysliwiec (@kamilmysliwiec)
• Mykhailo Skrypsky (@mixator)
• Spencer Kaiser (@SpencerKaiser)
• 조수민 (@suuuuuuminnnnnn)

v11.1.13

v11.1.13 (2026-02-03)

Bug fixes

• common
  • #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

• microservices
  • #16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)
  • #16262 Feat/microservices configurable max buffer size (@jobnow)
• common
  • #16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

• platform-fastify
  • #16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])
• platform-express
  • #16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

• Lee Donghyun (@devizi0)
• Mykhailo Skrypsky (@mixator)
• Neo (@chojs23)
• Praveen Somasundaram (@som14062005)
• Ricardo Gomes (@jobnow)
• 조수민 (@suuuuuuminnnnnn)

v11.1.12

v11.1.12 (2026-01-15)

Bug fixes

• common
  • #16187 fix(common): regression in loading file-type under Windows OS (@iamkanguk97)

Dependencies

• platform-ws
  • #16161 chore(deps): bump ws from 8.18.3 to 8.19.0 (@dependabot[bot])
• common
  • #16155 fix(deps): update dependency file-type to v21.3.0 (@renovate[bot])
• platform-fastify
  • #16154 fix(deps): update dependency find-my-way to v9.4.0 (@renovate[bot])

Committers: 3

• Antonio Tripodi (@Tony133)
• KANGUK LEE (@iamkanguk97)
• @miso-kyoungminkim

v10.4.22

What's Changed

• fix(express): Update body-parser to 1.20.4 for CVE-2025-15284 by @Xilis in #16178

Full Changelog: v10.4.21...v10.4.22

v10.4.21

What's Changed

• fix(express): Update express to 4.22.1 to address CVE-2025-15284 by @Xilis in #16157

New Contributors

• @Xilis made their first contribution in #16157

Full Changelog: v10.4.20...v10.4.21

v11.1.11

v11.1.11 (2025-12-29)

Bug fixes

• platform-fastify
  • #16135 fix(platform-fastify): middie bypassing through decoded chars (@kamilmysliwiec)
• core
  • #16133 fix(core): add missing catch handler for forward-ref provider resolution (@coti-z)

Dependencies

• platform-socket.io
  • #16125 fix(deps): update dependency socket.io to v4.8.3 (@renovate[bot])
  • #16114 chore(deps): bump socket.io from 4.8.1 to 4.8.2 (@dependabot[bot])
• platform-fastify
  • #16130 fix(deps): update dependency @fastify/static to v9 (@renovate[bot])
• common
  • #16127 chore(deps): bump file-type from 21.1.1 to 21.2.0 (@dependabot[bot])

Committers: 3

• Himanshu Gupta (@manureja64)
• Kamil Mysliwiec (@kamilmysliwiec)
• coti (@coti-z)

v11.1.10

v11.1.10 (2025-12-22)

Bug fixes

• core
  • #16098 fix(core): instantiate nested transient providers in static context (@mag123c)
  • #16005 fix(core): resolve all providers when using resolve() with each option (@malkovitc)
• microservices
  • #16072 fix(microservices): fix grpc stream method return type (@shash-hq)
• common
  • #16077 fix(common): resolve file-type path explicitly (@shash-hq)
  • #16013 fix(common): Support fallbackToMimetype without buffer (@chenjieya)

Enhancements

• common
  • #16100 fix(common): improve error handling in FileTypeValidator (@malkovitc)
  • #16060 feat(common): add message property to file type validator (@Jo-Minseok)
  • #16079 fix: enhance ValidationPipe (@liu-jin-yi)
• core
  • #15721 feat(core): add Promise support for SSE handlers (@pythonjsgo)
• microservices
  • #15975 feat(microservices): add keepalive support for server side (@OlegStrokan)
• common, core
  • #15986 feat(core): add option for async logger compatibility (@mag123c)

Dependencies

• platform-fastify
  • #16041 fix(deps): update dependency @fastify/cors to v11.2.0 (@renovate[bot])
• platform-express
  • #16002 fix(deps): update dependency express to v5.2.1 (@renovate[bot])
• common
  • #15948 chore(deps): bump file-type from 21.1.0 to 21.1.1 (@dependabot[bot])

Committers: 11

• Alexander (@pythonjsgo)
• J_Coder (@Jo-Minseok)
• Luke Son (@KAPUIST)
• Oleh Strokan (@OlegStrokan)
• Praveen Somasundaram (@som14062005)
• Shashank (@shash-hq)
• @chenjieya
• @giorgikakauridze
• @mag123c
• chernomortsev evgeny (@malkovitc)
• liu-jin-yi (@liu-jin-yi)