Update dependency @nestjs/platform-express to v11

[ibm-mend-app]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@nestjs/platform-express (source)	^10.4.9 -> ^11.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability
High	7.5	CVE-2025-47935
High	7.5	CVE-2025-47944
High	7.5	CVE-2025-48997

---

Release Notes

nestjs/nest (@​nestjs/platform-express)

v11.1.3

Compare Source

v11.1.3 (2025-06-06)

Bug fixes

• core
  • #​15201 fix(core): gracefully shutdown the app when repl exits (@​dzhlobo)

Enhancements

• common
  • #​15209 feat: add string array type to disposition (@​fjodor-rybakov)
• common, core
  • #​15203 feat(core): defer initialization connected microservice (@​isaryy)

Dependencies

• platform-express
  • #​15232 chore(deps): bump multer from 2.0.0 to 2.0.1 (@​dependabot[bot])

Committers: 3

• Dmitry Zhlobo (@​dzhlobo)
• @​fjodor-rybakov
• @​isaryy

v11.1.2

Compare Source

v11.1.2 (2025-05-26)

Bug fixes

• microservices
  • #​15172 fix(microservices): support custom strategy in async usefactory config (@​mag123c)
  • #​15166 fix(microservice): prevent error logs during redis client shutdown (@​janroker)

Dependencies

• common
  • #​15185 chore(deps): bump file-type from 20.5.0 to 21.0.0 (@​dependabot[bot])
• platform-express
  • #​15159 chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0 (@​dependabot[bot])

Committers: 2

• JaeHo Jang (@​mag123c)
• Jan Roček (@​janroker)

v11.1.1

Compare Source

v11.1.1 (2025-05-14)

Bug fixes

• core
  • #​15056 fix(core): HTTP adapter error mapping (@​maxbronnikov10)
• microservices
  • #​15062 fix(microservices): ensure all redis and amqp client closes properly (@​yatin166)
  • #​15032 fix(microservices): ensure all the amqp connections are closed properly (@​yatin166)
  • #​15020 fix(microservices): ensure all redis connections are closed (@​yatin166)
• core, platform-fastify
  • #​15061 fix(core): bring back getHeader and appendHeader methods from AbstractHttpAdapter (@​micalevisk)
• platform-express
  • #​15010 feat: remove use of pipeline (@​jmcdo29)

Enhancements

• microservices
  • #​14606 feat(microservices): add specific transport id to microservices (@​maxbronnikov10)
  • #​15057 feat(microservices): Allow custom exchangeType as string for plugin compatibility (@​ChangmoKang)
  • #​15072 feat(microservices): Add exchange arguments to RabbitMQ (@​gapon2401)

Dependencies

• platform-fastify
  • #​15129 chore(deps): bump fastify from 5.3.2 to 5.3.3 (@​dependabot[bot])
• platform-ws
  • #​15068 chore(deps): bump ws from 8.18.1 to 8.18.2 (@​dependabot[bot])
• common
  • #​15029 chore(deps): bump file-type from 20.4.1 to 20.5.0 (@​dependabot[bot])

Committers: 7

• Antonio Tripodi (@​Tony133)
• Changmo Kang (Ryan) (@​ChangmoKang)
• Igor Gaponov (@​gapon2401)
• Jackie McDoniel (@​jmcdo29)
• Maxim Bronnikov (@​maxbronnikov10)
• Micael Levi L. Cavalcante (@​micalevisk)
• Yatin Gaikwad (@​yatin166)

v11.1.0

Compare Source

v11.1.0 (2025-04-23)

Enhancements

• microservices
  • #​14540 feat(microservices): add support for topic exchange (rabbitmq) (@​kamilmysliwiec)

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.0.21

Compare Source

v11.0.21 (2025-04-23)

Enhancements

• common
  • #​14995 feat(common): Add fallbackToMimetype support in FileTypeValidator (@​mag123c)

Dependencies

• platform-fastify
  • #​14989 fix(deps): update dependency fastify to v5.3.2 [security] (@​renovate[bot])

Committers: 1

• JaeHo Jang (@​mag123c)

v11.0.20

Compare Source

What's Changed

• refactor(common): Prevent JavaScript being wrapped in eval by @​Borewit in https://github.com/nestjs/nest/pull/14974

New Contributors

• @​Borewit made their first contribution in https://github.com/nestjs/nest/pull/14974

Full Changelog: nestjs/nest@v11.0.19...v11.0.20

v11.0.19

Compare Source

v11.0.18

Compare Source

What's Changed

• chore(common): temporarily move file-type to regular deps nestjs/nest@d9a69a3

Full Changelog: nestjs/nest@v11.0.17...v11.0.18

v11.0.17

Compare Source

v11.0.16

Compare Source

v11.0.16 (2025-04-11)

• fix(common): use file-type to validate file mimetypes by @​Chathula in https://github.com/nestjs/nest/pull/14881

v11.0.15

Compare Source

v11.0.15 (2025-04-10)

Bug fixes

• platform-fastify
  • #​14935 fix(fastify): methods comparison (@​johaven)

Committers: 1

• Johan Legrand (@​johaven)

v11.0.14

Compare Source

v11.0.14 (2025-04-09)

Bug fixes

• platform-fastify
  • #​14511 fix(fastify): adds the non-standard http methods to the instance (@​johaven)

Committers: 1

• Johan Legrand (@​johaven)

v11.0.13

Compare Source

v11.0.13 (2025-04-03)

Bug fixes

• platform-fastify
  • #​14895 fix(fastify-adapter): global prefix exclusion path handling w/middleware (@​KyleLilly)
• microservices
  • #​14869 fix(microservices): do not re-create client connection once get client by service name (@​mingo023)

Dependencies

• platform-express
  • #​14883 fix(deps): update dependency express to v5.1.0 (@​renovate[bot])
  • #​14817 fix(deps): update dependency multer to v1.4.5-lts.2 (@​renovate[bot])
• platform-fastify
  • #​14861 fix(deps): update dependency fastify to v5.2.2 (@​renovate[bot])
  • #​14864 chore(deps): bump @​fastify/cors from 11.0.0 to 11.0.1 (@​dependabot[bot])

Committers: 2

• Kyle Lilly (@​KyleLilly)
• Minh Ngo (@​mingo023)

v11.0.12

Compare Source

v11.0.12 (2025-03-19)

Bug fixes

• core
  • #​14803 fix(core): infinite loop on broken circular reference (@​kamilmysliwiec)
  • https://github.com/nestjs/nest/pull/14792 dependencies not resolving for request-scoped lazy providers (@​anizozina)

Enhancements

• core
  • #​14802 feat(core): add options to the legacy route converter (@​kamilmysliwiec)

v11.0.11

Compare Source

v11.0.11 (2025-02-28)

Enhancements

• platform-fastify
  • #​14677 perf: Switch deprecated parser querystring for fast-querystring (@​smith558)

Dependencies

• platform-fastify
  • #​14711 fix(deps): update dependency @​fastify/cors to v11 (@​renovate[bot])
• platform-ws
  • #​14689 chore(deps): bump ws from 8.18.0 to 8.18.1 (@​dependabot[bot])

Committers: 1

• Stanislav (Stanley) Modrak (@​smith558)

v11.0.10

Compare Source

v11.0.10 (2025-02-17)

Bug fixes

• microservices
  • #​14605 fix(microservices): server send drops emitted value (@​shprota)
• platform-express
  • https://github.com/nestjs/nest/pull/14640 fix(platform-express) respect custom parser middlewares in Express 5 (@​luddwichr)

v11.0.9

Compare Source

v11.0.9 (2025-02-10)

Bug fixes

• core
  • #​14597 perf(core): use topology tree for calculating distance (depth) (@​kamilmysliwiec)
• common
  • #​14579 fix(common): revert to original value (swc builders regression) (@​kamilmysliwiec)

Committers: 2

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.0.8

Compare Source

v11.0.8 (2025-02-06)

Bug fixes

• common
  • #​14546 fix(common): addLeadingSlash optional group support (@​dcharbonnier)
• platform-express
  • #​14574 fix(platform-express) make check for existing middlewares work with Express 5 (@​luddwichr)

Committers: 4

• Ghassen Rjab (@​GhassenRjab)
• Shay Molcho (@​shaymolcho)
• @​dcharbonnier
• @​luddwichr

v11.0.7

Compare Source

v11.0.7 (2025-01-31)

Bug fixes

• core
  • #​14523 fix: middleware sort issues (@​rbnayax)

Committers: 1

• @​rbnayax

v11.0.6

Compare Source

v11.0.6 (2025-01-27)

Bug fixes

• core
  • #​14522 fix(core): allow optional named wildcard groups (@​kamilmysliwiec)

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.0.5

Compare Source

v11.0.5 (2025-01-23)

Bug fixes

• core
  • #​14495 fix(core): global module middleware should be executed first (@​kamilmysliwiec)

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.0.4

Compare Source

v11.0.3

Compare Source

v11.0.2

Compare Source

v11.0.1

Compare Source

v11.0.0

Compare Source

v11.0.0 (2025-01-16)

Article: https://trilon.io/blog/announcing-nestjs-11-whats-new
Migration guide: https://docs.nestjs.com/migration-guide 👈 👈 👈

⚠️ Node v16 and v18 are no longer supported (>= v20 is required).

Features

• common, core, microservices
  • #​14142 feat(microservices): add status, unwrap, on methods to microservice transporters (clients/servers) (@​kamilmysliwiec)
• • #​14121 feat(common): add json logger, built-in logger improvements (@​kamilmysliwiec)
• common, core
  • #​13336 feat(core): introduce different module opaque key factories (improve bootstrap performance) (@​kamilmysliwiec)
• common, core, microservices, platform-express, platform-fastify, platform-socket.io, platform-ws, testing, websockets
  • #​14238 chore(deps): upgrade to express v5, fastify v5, add legacy route path converter to minimize breaking changes (@​kamilmysliwiec)

Enhancements

• common
  • #​14213 feat(common): add error messages for file validators (@​mag123c)
  • #​14131 feat(common): allow passing number to http error createBody (@​kamilmysliwiec)
  • #​14122 feat(common): add ParseDatePipe, add tsdoc to other pipes (@​kamilmysliwiec)
  • #​12735 feat(common)!: type narrowing allowed injection tokens for @Inject() (@​micalevisk)
  • #​12764 fix(common): apply options to plaintoclass in classserializerinterceptor (@​kmw14641)
  • #​14126 fix(common): type narrowing context parameter on createParamDecorator's callback (@​EeeasyCode)
  • #​13628 chore(class-transformer): plainToClass is deprectated and replaced with plainToInstance (@​tomflorentin)
• microservices
  • #​14200 feat(microservices): support nats queue per handler (@​kamilmysliwiec)
  • #​13924 feat(microservices): add gracefull shutdown option for nats server (@​alinowrouzii)
  • #​12622 feat: allow for microservice options to come from the di container (@​jmcdo29)
  • #​14134 feat(microservices): add max tcp packet buffer length (@​kamilmysliwiec)
  • #​12761 feat(microservices): ability to use a random port for the TCP server (@​PieterScheffers)
• websockets
  • #​14184 feat(websockets): include exception cause to associate error with req (@​kamilmysliwiec)
• common, core, microservices, websockets
  • #​14182 feat(common): introduce intrinsic exception (@​kamilmysliwiec)
• common, core, platform-fastify
  • #​13278 feat(core,common,platform-fastify): add webdav http methods support (@​johaven)
• platform-express
  • #​13407 feat: add multer error fieldname to the exception message (@​mmgroner)
• platform-ws
  • #​14127 feat(ws): introduce message parser for ws adapter (@​CodyTseng)
• platform-fastify
  • #​14115 chore(fastify): update fastify view options interface (@​Tony133)
  • #​14116 refactor(fastify): update fastify static options interface (@​Tony133)
• common, core
  • #​14113 feat(core): allow overriding abortOnError for the select method (@​kamilmysliwiec)

Bug fixes

• core
  • #​14267 fix shutdown hooks order (@​flovouin)
  • #​13388 correction of Reflector types (@​AlexRMU)
  • #​14110 fix(core): Calculate module distance after bindGlobalScope (@​wenlong-chen)
  • #​14111 fix(core): Order of module destroy should be the reverse of module init (@​wenlong-chen)
  • #​14097 fix(core): revisit dependencies w/ possibly higher distance (@​clkamp)
• platform-fastify
  • #​13797 fix(fastify-adapter): middleware not executed when root path is excluded (@​patrickacioli)
• microservices
  • #​14129 fix: rabbitmq bindings and auto-generated queues (@​EeeasyCode)
  • #​14112 fix(microservices): use instance refs for target handler callbacks (@​kamilmysliwiec)
  • #​13468 fix(microservices): delete unnecessary call of grpcClient.start (@​kamilmysliwiec)
• common
  • #​14114 fix(common)!: drop broken support for promises on exports of modules (@​micalevisk)

Other packages in the ecosystem

• config (breaking changes)
  • https://github.com/nestjs/config/releases/tag/4.0.0
• cli
  • https://github.com/nestjs/nest-cli/releases/tag/11.0.0
• cache-manager (breaking changes)
  • https://github.com/nestjs/cache-manager/releases/tag/3.0.0
• cqrs
  • https://github.com/nestjs/cqrs/releases/tag/11.0.0

Dependencies

• Other
  • #​14205 chore(dev-deps): upgrade to eslint v9 (@​kamilmysliwiec)
  • #​14428 fix(deps): update dependency mercurius to v16.0.1 (@​renovate[bot])
  • #​14424 fix(deps): update dependency mongoose to v8.9.5 (@​renovate[bot])
  • #​14410 fix(deps): update dependency @​fastify/static to v8.0.4 (@​renovate[bot])
  • #​14411 fix(deps): update dependency @​fastify/view to v10.0.2 (@​renovate[bot])
  • #​14403 chore(deps): update dependency nats to v2.29.1 (@​renovate[bot])
  • #​14400 fix(deps): update dependency ansis to v3.8.1 (@​renovate[bot])
  • #​14337 chore(deps): update dependency @​fastify/multipart to v9.0.2 (@​renovate[bot])
  • #​14415 fix(deps): update dependency mercurius to v16 (@​renovate[bot])
  • #​14397 chore(deps): update dependency webpack-cli to v6 (@​renovate[bot])
  • #​14384 fix(deps): update dependency typescript to v5.7.3 (@​renovate[bot])
  • #​14378 chore(deps): update dependency core-js to v3.40.0 (@​renovate[bot])
  • #​14377 chore(deps): update dependency @​eslint/js to v9.17.0 (@​renovate[bot])
  • #​14375 chore(deps): update dependency @​grpc/grpc-js to v1.12.5 (@​renovate[bot])
  • #​14370 chore(deps): update dependency ioredis to v5.4.2 (@​renovate[bot])
  • #​14197 chore(deps-dev): bump @​fastify/static from 7.0.4 to 8.0.3 (@​dependabot[bot])
  • #​14345 chore(deps): update dependency eslint to v9 (@​renovate[bot])
  • #​14324 fix(deps): update dependency @​socket.io/redis-adapter to v8.3.0 (@​renovate[bot])
  • #​14363 chore(deps): bump @​fastify/cors from 9.0.1 to 10.0.2 (@​dependabot[bot])
  • #​14354 chore(deps-dev): bump cache-manager from 5.7.6 to 6.3.2 (@​dependabot[bot])
  • #​14021 chore(deps-dev): bump @​fastify/view from 9.1.0 to 10.0.1 (@​dependabot[bot])
  • #​14326 fix(deps): update dependency mongodb to v6.12.0 (@​renovate[bot])
  • #​14307 fix(deps): update dependency @​grpc/grpc-js to v1.12.4 (@​renovate[bot])
• platform-fastify
  • #​14402 fix(deps): update dependency @​fastify/middie to v9.0.3 (@​renovate[bot])
  • #​14401 fix(deps): update dependency @​fastify/formbody to v8.0.2 (@​renovate[bot])
  • #​14387 fix(deps): update dependency light-my-request to v6.5.1 (@​renovate[bot])
  • #​13990 feat(platform-fastify): added support for Fastify v5 (@​Tony133)

Committers: 22

• Alex (@​AlexRMU)
• Ali Nowrouzi (@​alinowrouzii)
• Antonio Tripodi (@​Tony133)
• Christian Lütke-Stetzkamp (@​clkamp)
• Cody Tseng (@​CodyTseng)
• Flo (@​flovouin)
• Harel Danieli (@​Hareloo)
• Jackie McDoniel (@​jmcdo29)
• JaeHo Jang (@​mag123c)
• Johaven (@​johaven)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Khan / 이창민 (@​EeeasyCode)
• Max Katz (@​maxktz)
• Mendel Groner (@​mmgroner)
• Micael Levi L. Cavalcante (@​micalevisk)
• Mitchell (@​Mittcio)
• Patrick Acioli (@​patrickacioli)
• Pieter Scheffers (@​PieterScheffers)
• @​bestlyg
• @​kmw14641
• @​tomflorentin
• @​wenlong-chen

v10.4.19

Compare Source

v10.4.19 (2025-06-09)

Dependencies

• platform-express
  • chore(deps): bump multer from 2.0.0 to 2.0.1 (@​dependabot[bot])

v10.4.18

Compare Source

v10.4.18 (2025-05-26)

Dependencies

• platform-express
  • chore(deps): bump multer from 1.4.5-lts.2 to 2.0.0

---

• If you want to rebase/retry this PR, check this box