chore(deps): bump the backend-compatible-updates group across 1 directory with 23 updates by dependabot[bot] · Pull Request #136 · JasonTM17/FoodDelivery_App

dependabot · 2026-09-24T06:26:15Z

Bumps the backend-compatible-updates group with 23 updates in the /backend directory:

Package	From	To
@nestjs/bullmq	`11.0.4`	`11.0.5`
@nestjs/common	`11.1.28`	`11.2.5`
@nestjs/core	`11.1.28`	`11.2.5`
@nestjs/platform-express	`11.1.28`	`11.2.5`
@nestjs/platform-socket.io	`11.1.28`	`11.2.5`
@nestjs/swagger	`11.4.4`	`11.4.7`
@nestjs/throttler	`6.5.0`	`6.7.0`
@nestjs/websockets	`11.1.28`	`11.2.5`
@supabase/supabase-js	`2.110.1`	`2.116.0`
bullmq	`5.78.0`	`5.81.5`
dayjs	`1.11.21`	`1.11.23`
firebase-admin	`14.1.0`	`14.4.0`
helmet	`8.2.0`	`8.3.0`
nanoid	`5.1.11`	`5.1.16`
nodemailer	`9.0.3`	`9.1.1`
redis	`6.0.0`	`6.2.1`
@eslint/js	`9.39.4`	`9.39.5`
@nestjs/cli	`11.0.23`	`11.0.24`
@nestjs/testing	`11.1.28`	`11.2.5`
@types/node	`22.19.19`	`22.20.4`
jest	`30.4.2`	`30.5.2`
ts-jest	`29.4.11`	`29.4.12`
typescript-eslint	`8.64.0`	`8.70.0`

Updates @nestjs/bullmq from 11.0.4 to 11.0.5

Release notes

Sourced from @nestjs/bullmq's releases.

@nestjs/bullmq@11.0.5

What's Changed

feat(bullmq): add telemetry support for workers by @noeljackson in nestjs/bull#2585

feat: add forceDisconnectOnShutdown option for graceful disconnection by @heartz66 in nestjs/bull#2674

feat: support bullmq v6 by @kamilmysliwiec

New Contributors

@meteorlxy made their first contribution in nestjs/bull#2632

@noeljackson made their first contribution in nestjs/bull#2585

@heartz66 made their first contribution in nestjs/bull#2674

Full Changelog: https://github.com/nestjs/bull/compare/@nestjs/bull-shared@11.0.0...@nestjs/bullmq@11.0.5

Commits

323149d chore(release): publish new releases
38a9240 ci: fix config.yml
e84add6 feat: support bullmq v6
998aeef chore(deps): update dependency oxlint to v1.77.0 (#2877)
4c28d35 chore(deps): update dependency lerna to v10 (#2876)
514a30e chore(deps): update dependency bullmq to v5.81.3 (#2874)
0c16caa chore(deps): update dependency oxlint to v1.76.0 (#2873)
db9e38f chore(deps): update dependency typescript to v7 (#2872)
99e494f chore(deps): update dependency sort-package-json to v4 (#2871)
5ce1663 chore(deps): update dependency sort-package-json to v3.7.1 (#2870)
Additional commits viewable in compare view

Updates @nestjs/common from 11.1.28 to 11.2.5

Release notes

Sourced from @nestjs/common's releases.

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

feat(core,common,platform-fastify): add query http method support by @gacardinal in nestjs/nest#17162

fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @LeSingh1 in nestjs/nest#17086

test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @brayanjeshua in nestjs/nest#17310

feat(core): sse signal by @kamilmysliwiec in nestjs/nest#17469

chore(deps): update dependency fastify to v5.12.0 by @renovate[bot] in nestjs/nest#17473

New Contributors

@shariyerShazan made their first contribution in nestjs/nest#17430

@Jaybhade made their first contribution in nestjs/nest#17435

... (truncated)

Commits

e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
7ebaa88 chore: drop skip instrumentation - duplicated api
4593b0a fix(core): preserve middleware arity #17554
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
b2e7fb5 Merge pull request #17469 from nestjs/feat/sse-signal
6498f11 feat: signal should finalize in every case
Additional commits viewable in compare view

Updates @nestjs/core from 11.1.28 to 11.2.5

Release notes

Sourced from @nestjs/core's releases.

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

feat(core,common,platform-fastify): add query http method support by @gacardinal in nestjs/nest#17162

fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @LeSingh1 in nestjs/nest#17086

test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @brayanjeshua in nestjs/nest#17310

feat(core): sse signal by @kamilmysliwiec in nestjs/nest#17469

chore(deps): update dependency fastify to v5.12.0 by @renovate[bot] in nestjs/nest#17473

New Contributors

@shariyerShazan made their first contribution in nestjs/nest#17430

@Jaybhade made their first contribution in nestjs/nest#17435

... (truncated)

Commits

e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
e12b47b fix(core): circular durable providers issue #17562
7e65752 chore(release): publish v11.2.2 release
7ebaa88 chore: drop skip instrumentation - duplicated api
4593b0a fix(core): preserve middleware arity #17554
35a29cc fix(core): instrument middleware fallback issue
4535f43 chore(release): publish v11.2.1 release
a326599 fix(core): fix sse early-return
Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.1.28 to 11.2.5

Release notes

Sourced from @nestjs/platform-express's releases.

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

feat(core,common,platform-fastify): add query http method support by @gacardinal in nestjs/nest#17162

fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @LeSingh1 in nestjs/nest#17086

test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @brayanjeshua in nestjs/nest#17310

feat(core): sse signal by @kamilmysliwiec in nestjs/nest#17469

chore(deps): update dependency fastify to v5.12.0 by @renovate[bot] in nestjs/nest#17473

New Contributors

@shariyerShazan made their first contribution in nestjs/nest#17430

@Jaybhade made their first contribution in nestjs/nest#17435

... (truncated)

Commits

e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
03587a1 chore(release): publish v11.1.29 release
4e4f8f0 Merge pull request #17421 from Se3do/fix/express-multer-limit-field-nesting
2a532e7 chore: fix misspelled spec filenames
4a40978 fix(express): map missing multer field nesting error
Additional commits viewable in compare view

Updates @nestjs/platform-socket.io from 11.1.28 to 11.2.5

Release notes

Sourced from @nestjs/platform-socket.io's releases.

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

feat(core,common,platform-fastify): add query http method support by @gacardinal in nestjs/nest#17162

fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @LeSingh1 in nestjs/nest#17086

test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @brayanjeshua in nestjs/nest#17310

feat(core): sse signal by @kamilmysliwiec in nestjs/nest#17469

chore(deps): update dependency fastify to v5.12.0 by @renovate[bot] in nestjs/nest#17473

New Contributors

@shariyerShazan made their first contribution in nestjs/nest#17430

@Jaybhade made their first contribution in nestjs/nest#17435

... (truncated)

Commits

e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
03587a1 chore(release): publish v11.1.29 release
92bc05d chore: update readme
See full diff in compare view

Updates @nestjs/swagger from 11.4.4 to 11.4.7

Release notes

Sourced from @nestjs/swagger's releases.

11.4.7

What's Changed

fix(plugin): preserve inferred responses for enum error statuses by @GiHoon1123 in nestjs/swagger#4014

chore(deps): update dependency @fastify/static to v10 [security] by @renovate[bot] in nestjs/swagger#4028

feat(interfaces): export full OpenAPI object-model types in public API by @Fcmam5 in nestjs/swagger#4048

fix(plugin): handle decorators with property access expressions in getIdentifierFromName by @jorenl in nestjs/swagger#4042

fix(deps): update dependency js-yaml to v5.3.0 by @renovate[bot] in nestjs/swagger#4053

feat(api-header): support custom OpenAPI extensions by @kyungseopk1m in nestjs/swagger#4047

fix(type-helpers): apply deep partial substitution to plugin metadata by @kyungseopk1m in nestjs/swagger#4030

fix(plugin): rebase readonly import paths onto the output directory by @kyungseopk1m in nestjs/swagger#4019

fix(plugin): generate object examples from @example doc tags by @y-hsgw in nestjs/swagger#4005

New Contributors

@GiHoon1123 made their first contribution in nestjs/swagger#4014

@Fcmam5 made their first contribution in nestjs/swagger#4048

@jorenl made their first contribution in nestjs/swagger#4042

Full Changelog: nestjs/swagger@11.4.6...11.4.7

Release 11.4.6

11.4.6 (2026-07-17)

Features

#3964 feat(plugin): infer ApiParam enum from @Param literal-union types (@y-hsgw)

Bug fixes

#3947 fix(type-helpers): preserve array-ness for nested DTO arrays in DeepPartialType (@yogeshwaran-c)

#3945 fix(mimetype-content-wrapper): clone object per mimetype to avoid shared references (@yogeshwaran-c)

#3972 fix: avoid inline PickType schema collisions (@cyphercodes)

#3969 fix: Added missing summary type to the response object (@MichielDeMey)

Enhancements

#3949 feat(api-query): support custom OpenAPI extensions (@yogeshwaran-c)

Dependencies

#3986 fix(deps): update dependency js-yaml to v5 (@renovate[bot])

Committers: 4

Michiel De Mey (@MichielDeMey)

Rayan Salhab (@cyphercodes)

Yogeshwaran C (@yogeshwaran-c)

Yukihiro Hasegawa (@y-hsgw)

11.4.5

What's Changed

feat(plugin): generate additionalProperties for Record/index-signature types by @y-hsgw in nestjs/swagger#3957

fix(deps): update dependency swagger-ui-dist to v5.32.8 by @renovate[bot] in nestjs/swagger#3973

fix(deps): update dependency js-yaml to v4.2.0 [security] by @renovate[bot] in nestjs/swagger#3988

... (truncated)

Commits

77e3d46 chore(): release v11.4.7
782cdc0 Merge pull request #4056 from nestjs/renovate/js-yaml-5.x-lockfile
4a5a4b0 Merge pull request #4005 from y-hsgw/fix/plugin-object-example
11b3fb6 chore(deps): update dependency js-yaml to v5.3.0
e5203bf Merge pull request #4019 from kyungseopk1m/fix/readonly-outdir-import-path
fccfa59 Merge pull request #4030 from kyungseopk1m/fix/deep-partial-type-plugin-metadata
91e5917 Merge pull request #4047 from kyungseopk1m/feat/api-header-extensions
1296583 Merge pull request #4053 from nestjs/renovate/js-yaml-5.x
f436f56 Merge pull request #4054 from nestjs/renovate/fastify-static-10.x
b293944 Merge pull request #4042 from jorenl/bugfix/plugin-get-identifier-from-name-p...
Additional commits viewable in compare view

Updates @nestjs/throttler from 6.5.0 to 6.7.0

Release notes

Sourced from @nestjs/throttler's releases.

v6.7.0

Minor Changes

7004a97: Normalize IPv6 source addresses in the default tracker, and evict expired records from the in-memory storage.

The built-in getTracker returned req.ip verbatim, so a client holding an IPv6 allocation could send every request from a different address within its own subnet and never share a counter, defeating the rate limit. Addresses are now masked to a /64 before being used as the tracker; the prefix length is configurable via the new ipv6SubnetPrefix module option. IPv4 addresses, IPv4-mapped addresses, the loopback, and custom getTracker implementations are unaffected.

ThrottlerStorageService also never removed records, so a stream of requests from distinct trackers grew the internal map for the lifetime of the process. Idle records are now swept out once their window has fully elapsed. Limiting behaviour is unchanged: a record is only dropped after every pending hit has expired and any block has lapsed.

Note that the tracker string for IPv6 clients changes shape (2001:db8:0:1::/64), so storage keys rotate once on upgrade.

v6.6.0

Minor Changes

c342bad: Declare the supported Node versions in engines, matching the range the CI matrix tests

c625e98: Update to allow for support for Nest version 12

Changelog

Sourced from @nestjs/throttler's changelog.

6.7.0

Minor Changes

7004a97: Normalize IPv6 source addresses in the default tracker, and evict expired records from the in-memory storage.

The built-in getTracker returned req.ip verbatim, so a client holding an IPv6 allocation could send every request from a different address within its own subnet and never share a counter, defeating the rate limit. Addresses are now masked to a /64 before being used as the tracker; the prefix length is configurable via the new ipv6SubnetPrefix module option. IPv4 addresses, IPv4-mapped addresses, the loopback, and custom getTracker implementations are unaffected.

ThrottlerStorageService also never removed records, so a stream of requests from distinct trackers grew the internal map for the lifetime of the process. Idle records are now swept out once their window has fully elapsed. Limiting behaviour is unchanged: a record is only dropped after every pending hit has expired and any block has lapsed.

Note that the tracker string for IPv6 clients changes shape (2001:db8:0:1::/64), so storage keys rotate once on upgrade.

6.6.0

Minor Changes

c342bad: Declare the supported Node versions in engines, matching the range the CI matrix tests

c625e98: Update to allow for support for Nest version 12

6.4.0

6.5.1

Patch Changes

603cb82: handles edge case where multiple clients making frequent requests interfere with each other

Commits

cc1834c Merge pull request #2696 from nestjs/changeset-release/master
22c1797 chore: version packages
e0d634e Merge pull request #2695 from nestjs/fix/ipv6-tracker-normalization
e0b3928 docs: add a security policy
7004a97 fix: normalize ipv6 trackers and evict stale throttler records
4c98809 chore: version packages
1977e00 ci: update release flow for trusted publishing
b69e1c9 chore: update lockfile and workspace for newer pnpm
c342bad ci: restore the release pipeline and align the toolchain
194da4a chore(deps): update nest monorepo to v11.2.4
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @nestjs/throttler since your current version.

Updates @nestjs/websockets from 11.1.28 to 11.2.5

Release notes

Sourced from @nestjs/websockets's releases.

v11.2.5

What's changed

@nestjs/microservices

fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

What's changed

fix(microservices): handle unserializable patterns without crashing

fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

What's Changed

fix(core): circular durable providers issue by @kamilmysliwiec in nestjs/nest#17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

What's changed

fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec

fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

v11.2.1

What's Changed

fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

What's Changed

fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in nestjs/nest#17430

fix(common): match string file types containing regex metacharacters by @Jaybhade in nestjs/nest#17435

fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in nestjs/nest#17416

fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in nestjs/nest#17377

fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in nestjs/nest#17350

fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in nestjs/nest#17464

feat(core,common,platform-fastify): add query http method support by @gacardinal in nestjs/nest#17162

fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @LeSingh1 in nestjs/nest#17086

test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @brayanjeshua in nestjs/nest#17310

feat(core): sse signal by @kamilmysliwiec in nestjs/nest#17469

chore(deps): update dependency fastify to v5.12.0 by @renovate[bot] in nestjs/nest#17473

New Contributors

@shariyerShazan made their first contribution in nestjs/nest#17430

@Jaybhade made their first contribution in nestjs/nest#17435

... (truncated)

Commits

e91618c chore(release): publish v11.2.5 release
d504622 chore(release): publish v11.2.4 release
2b36ee5 chore(release): publish v11.2.3 release
7e65752 chore(release): publish v11.2.2 release
4535f43 chore(release): publish v11.2.1 release
f2a7e4b chore(release): publish v11.2.0 release
03587a1 chore(release): publish v11.1.29 release
92bc05d chore: update readme
See full diff in compare view

Updates @supabase/supabase-js from 2.110.1 to 2.116.0

Release notes

Sourced from @supabase/supabase-js's releases.

v2.116.0

2.116.0 (2026-09-07)

🚀 Features

auth: add MFA recovery codes API (#2676)

storage: add bucket lifecycle configuration (#2659)

storage: topk 10k support (#2667)

storage: add versionId support to create URL methods (#2678)

🩹 Fixes

auth: silence commit-guard-discarded refresh in initial session (#2668)

storage: drop legacy prefix from lifecycles (#2674)

supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

fadymak

Ferhat Elmas

Katerina Skroumpelou @mandarini

Tyler Hillery

v2.116.0-canary.3

2.116.0-canary.3 (2026-09-07)

🚀 Features

auth: add MFA recovery codes API (#2676)

storage: add versionId support to create URL methods (#2678)

❤️ Thank You

fadymak

Katerina Skroumpelou

Tyler Hillery

v2.116.0-canary.2

2.116.0-canary.2 (2026-09-07)

🚀 Features

storage: topk 10k support (#2667)

🩹 Fixes

storage: drop legacy prefix from lifecycles (#2674)

❤️ Thank You

... (truncated)

Changelog

Sourced from @supabase/supabase-js's changelog.

2.116.0 (2026-09-07)

🚀 Features

auth: add MFA recovery codes API (#2676)

🩹 Fixes

supabase: warn when schema is passed outside db options (#2663)

❤️ Thank You

fadymak

Katerina Skroumpelou @mandarini

2.115.0 (2026-09-03)

🚀 Features

postgrest: add getOpenApiSpec() (#2651)

❤️ Thank You

Katerina Skroumpelou @mandarini

2.114.0 (2026-09-02)

This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.

2.113.0 (2026-09-02)

This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.

2.112.4 (2026-08-24)

This was a version bump only for @supabase/supabase-js to align it with other projects, there were no code changes.

2.112.3 (2026-08-11)

🩹 Fixes

supabase: improve trace propagation sampling and diagnostics (#2604)

supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

Katerina Skroumpelou @mandarini

2.112.2 (2026-08-06)

... (truncated)

Commits

5aedaab feat(auth): add MFA recovery codes API (#2676)
e4f675a fix(supabase): warn when schema is passed outside db options (#2663)
dbe7679 chore(release): version 2.115.0 changelogs (#2664)
3eb6193 docs(supabase): clarify db.schema needs the second generic (#2662)
92fb8ba feat(postgrest): add getOpenApiSpec() (#2651)
aef432b chore(release): version 2.114.0 changelogs (#2653)
67b07b0 chore(release): version 2.113.0 changelogs (#2650)
062ae5e chore(release): version 2.112.4 changelogs (#2628)
c7397c1 chore(supabase): bump supabase cli to 2.113.0 (#2606)
bbc167c chore(release): version 2.112.3 changelogs (#2608)
Additional commits viewable in compare view

Updates bullmq from 5.78.0 to 5.81.5

Release notes

Sourced from bullmq's releases.

Description has been truncated

…tory with 23 updates Bumps the backend-compatible-updates group with 23 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [@nestjs/bullmq](https://github.com/nestjs/bull) | `11.0.4` | `11.0.5` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.1.28` | `11.2.5` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.1.28` | `11.2.5` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.1.28` | `11.2.5` | | [@nestjs/platform-socket.io](https://github.com/nestjs/nest/tree/HEAD/packages/platform-socket.io) | `11.1.28` | `11.2.5` | | [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.4.4` | `11.4.7` | | [@nestjs/throttler](https://github.com/nestjs/throttler) | `6.5.0` | `6.7.0` | | [@nestjs/websockets](https://github.com/nestjs/nest/tree/HEAD/packages/websockets) | `11.1.28` | `11.2.5` | | [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.110.1` | `2.116.0` | | [bullmq](https://github.com/taskforcesh/bullmq) | `5.78.0` | `5.81.5` | | [dayjs](https://github.com/iamkun/dayjs) | `1.11.21` | `1.11.23` | | [firebase-admin](https://github.com/firebase/firebase-admin-node) | `14.1.0` | `14.4.0` | | [helmet](https://github.com/helmetjs/helmet) | `8.2.0` | `8.3.0` | | [nanoid](https://github.com/ai/nanoid) | `5.1.11` | `5.1.16` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.3` | `9.1.1` | | [redis](https://github.com/redis/node-redis) | `6.0.0` | `6.2.1` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `9.39.5` | | [@nestjs/cli](https://github.com/nestjs/nest-cli) | `11.0.23` | `11.0.24` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.1.28` | `11.2.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.19.19` | `22.20.4` | | [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.4.2` | `30.5.2` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.11` | `29.4.12` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.70.0` | Updates `@nestjs/bullmq` from 11.0.4 to 11.0.5 - [Release notes](https://github.com/nestjs/bull/releases) - [Commits](https://github.com/nestjs/bull/compare/@nestjs/bullmq@11.0.4...@nestjs/bullmq@11.0.5) Updates `@nestjs/common` from 11.1.28 to 11.2.5 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.5/packages/common) Updates `@nestjs/core` from 11.1.28 to 11.2.5 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.5/packages/core) Updates `@nestjs/platform-express` from 11.1.28 to 11.2.5 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.5/packages/platform-express) Updates `@nestjs/platform-socket.io` from 11.1.28 to 11.2.5 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.5/packages/platform-socket.io) Updates `@nestjs/swagger` from 11.4.4 to 11.4.7 - [Release notes](https://github.com/nestjs/swagger/releases) - [Commits](nestjs/swagger@11.4.4...11.4.7) Updates `@nestjs/throttler` from 6.5.0 to 6.7.0 - [Release notes](https://github.com/nestjs/throttler/releases) - [Changelog](https://github.com/nestjs/throttler/blob/master/CHANGELOG.md) - [Commits](nestjs/throttler@v6.5.0...v6.7.0) Updates `@nestjs/websockets` from 11.1.28 to 11.2.5 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.5/packages/websockets) Updates `@supabase/supabase-js` from 2.110.1 to 2.116.0 - [Release notes](https://github.com/supabase/supabase-js/releases) - [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md) - [Commits](https://github.com/supabase/supabase-js/commits/v2.116.0/packages/core/supabase-js) Updates `bullmq` from 5.78.0 to 5.81.5 - [Release notes](https://github.com/taskforcesh/bullmq/releases) - [Commits](taskforcesh/bullmq@v5.78.0...v5.81.5) Updates `dayjs` from 1.11.21 to 1.11.23 - [Release notes](https://github.com/iamkun/dayjs/releases) - [Changelog](https://github.com/iamkun/dayjs/blob/v1.11.23/CHANGELOG.md) - [Commits](iamkun/dayjs@v1.11.21...v1.11.23) Updates `firebase-admin` from 14.1.0 to 14.4.0 - [Release notes](https://github.com/firebase/firebase-admin-node/releases) - [Changelog](https://github.com/firebase/firebase-admin-node/blob/main/CHANGELOG.md) - [Commits](firebase/firebase-admin-node@v14.1.0...v14.4.0) Updates `helmet` from 8.2.0 to 8.3.0 - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](helmetjs/helmet@v8.2.0...v8.3.0) Updates `nanoid` from 5.1.11 to 5.1.16 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](ai/nanoid@5.1.11...5.1.16) Updates `nodemailer` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/nodemailer/nodemailer/releases) - [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md) - [Commits](nodemailer/nodemailer@v9.0.3...v9.1.1) Updates `redis` from 6.0.0 to 6.2.1 - [Release notes](https://github.com/redis/node-redis/releases) - [Changelog](https://github.com/redis/node-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/node-redis/compare/redis@6.0.0...redis@6.2.1) Updates `@eslint/js` from 9.39.4 to 9.39.5 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.5/packages/js) Updates `@nestjs/cli` from 11.0.23 to 11.0.24 - [Release notes](https://github.com/nestjs/nest-cli/releases) - [Commits](nestjs/nest-cli@11.0.23...11.0.24) Updates `@nestjs/testing` from 11.1.28 to 11.2.5 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v11.2.5/packages/testing) Updates `@types/node` from 22.19.19 to 22.20.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `jest` from 30.4.2 to 30.5.2 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest) Updates `ts-jest` from 29.4.11 to 29.4.12 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.11...v29.4.12) Updates `typescript-eslint` from 8.64.0 to 8.70.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@nestjs/bullmq" dependency-version: 11.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-compatible-updates - dependency-name: "@nestjs/common" dependency-version: 11.2.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@nestjs/core" dependency-version: 11.2.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@nestjs/platform-express" dependency-version: 11.2.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@nestjs/platform-socket.io" dependency-version: 11.2.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@nestjs/swagger" dependency-version: 11.4.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-compatible-updates - dependency-name: "@nestjs/throttler" dependency-version: 6.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@nestjs/websockets" dependency-version: 11.2.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@supabase/supabase-js" dependency-version: 2.116.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: bullmq dependency-version: 5.81.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: dayjs dependency-version: 1.11.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-compatible-updates - dependency-name: firebase-admin dependency-version: 14.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: helmet dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: nanoid dependency-version: 5.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-compatible-updates - dependency-name: nodemailer dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: redis dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@eslint/js" dependency-version: 9.39.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-compatible-updates - dependency-name: "@nestjs/cli" dependency-version: 11.0.24 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-compatible-updates - dependency-name: "@nestjs/testing" dependency-version: 11.2.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: "@types/node" dependency-version: 22.20.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: jest dependency-version: 30.5.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-compatible-updates - dependency-name: ts-jest dependency-version: 29.4.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-compatible-updates - dependency-name: typescript-eslint dependency-version: 8.70.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backend-compatible-updates ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-09-24T06:26:19Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
food-delivery-app	Ready	Preview	Sep 24, 2026 6:29am UTC
foodflow-restaurant	Ready	Preview	Sep 24, 2026 6:29am UTC

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 24, 2026

dependabot Bot requested a review from JasonTM17 as a code owner September 24, 2026 06:26

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 24, 2026

vercel Bot deployed to Preview – food-delivery-app September 24, 2026 06:28 View deployment

vercel Bot deployed to Preview – foodflow-restaurant September 24, 2026 06:29 View deployment

Navigation Menu

chore(deps): bump the backend-compatible-updates group across 1 directory with 23 updates - #136

chore(deps): bump the backend-compatible-updates group across 1 directory with 23 updates#136
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/backend/backend-compatible-updates-e604da4b6e

dependabot Bot commented on behalf of github Sep 24, 2026

Uh oh!

vercel Bot commented Sep 24, 2026 •

edited

Loading

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 24, 2026

@​nestjs/bullmq@​11.0.5

What's Changed

New Contributors

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.1

What's Changed

v11.2.0

What's Changed

New Contributors

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.1

What's Changed

v11.2.0

What's Changed

New Contributors

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.1

What's Changed

v11.2.0

What's Changed

New Contributors

v11.2.5

What's changed

v11.2.4

What's changed

v11.2.3

What's Changed

v11.2.2

What's changed

v11.2.1

What's Changed

v11.2.0

What's Changed

New Contributors

11.4.7

What's Changed

New Contributors

Release 11.4.6

11.4.6 (2026-07-17)

Features

Bug fixes

Enhancements

Dependencies

Committers: 4

11.4.5

What's Changed

v6.7.0

Minor Changes

v6.6.0

Minor Changes

6.7.0

Minor Changes

6.6.0

Minor Changes

6.4.0

6.5.1

Patch Changes

`@nestjs/bullmq@11`.0.5

vercel Bot commented Sep 24, 2026 •

edited

Loading