Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Respond to NestJS v11 update #1193

Merged
merged 4 commits into from
Jan 20, 2025
Merged

Respond to NestJS v11 update #1193

merged 4 commits into from
Jan 20, 2025

Conversation

samchon
Copy link
Owner

@samchon samchon commented Jan 17, 2025

This pull request includes updates to multiple package.json files across various packages to upgrade dependencies and versions. Additionally, there are some minor code changes to improve type safety and simplify function signatures.

Dependency Updates:

  • Upgraded @nestjs/common, @nestjs/core, @nestjs/platform-express, and @nestjs/platform-fastify to version ^11.0.1 in multiple package.json files (benchmark/package.json, packages/benchmark/package.json, packages/chat/package.json, packages/core/package.json, packages/editor/package.json, packages/migrate/package.json, packages/sdk/package.json, test/package.json). [1] [2] [3] [4] [5] [6] [7] [8]
  • Upgraded @nestjs/swagger to version ^11.0.0 in test/package.json.

Version Bumps:

  • Updated the version numbers for various packages, such as @nestia/station, @nestia/core, @nestia/editor, @nestia/fetcher, @nestia/migrate, and @nestia/sdk to 4.6.1 or 4.6.1-dev.20250117 in their respective package.json files. [1] [2] [3] [4] [5] [6]

Code Improvements:

  • Updated type assertions in WebSocketAdaptor.ts to improve type safety. [1] [2]
  • Simplified function signatures by removing unnecessary return type declarations in DynamicModule.ts and EncryptedModule.ts. [1] [2]

@samchon samchon added the enhancement New feature or request label Jan 17, 2025
@samchon samchon self-assigned this Jan 17, 2025
Copy link

socket-security bot commented Jan 17, 2025

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@emotion/[email protected] environment Transitive: filesystem, unsafe +42 4.45 MB emotion-release-bot
npm/@emotion/[email protected] environment Transitive: filesystem, unsafe +37 3.74 MB emotion-release-bot
npm/@mui/[email protected] None +2 18.9 MB brijeshb42
npm/@mui/[email protected] environment +22 18.8 MB brijeshb42
npm/@mui/[email protected] environment +19 6.38 MB brijeshb42
npm/@nestia/[email protected] network Transitive: environment, eval, filesystem, shell, unsafe +116 40.6 MB samchon
npm/@nestjs/[email protected] 🔁 npm/@nestjs/[email protected] network 0 64.6 kB nestjscore
npm/@nestjs/[email protected] 🔁 npm/@nestjs/[email protected] None +4 273 kB kamilmysliwiec, nestjscore
npm/@types/[email protected] 🔁 npm/@types/[email protected] None 0 3.56 MB types
npm/@types/[email protected] 🔁 npm/@types/[email protected] None +3 1.44 MB types
npm/[email protected] filesystem, shell Transitive: environment +38 740 kB tschaub
npm/[email protected] Transitive: environment +12 1.79 MB stuk
npm/[email protected] Transitive: filesystem +20 836 kB iamvishnusankar
npm/[email protected] environment, filesystem, network, shell, unsafe +22 1.2 GB vercel-release-bot
npm/[email protected] Transitive: environment, eval +24 6.21 MB quietshu
npm/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +416 252 MB quietshu
npm/[email protected] 🔁 npm/[email protected] None +2 4.6 MB gnoff
npm/[email protected] 🔁 npm/[email protected] None +1 322 kB gnoff
npm/[email protected] Transitive: environment, filesystem, shell +6 1.26 MB flosse
npm/[email protected] Transitive: environment, filesystem +15 15.4 MB typedoc-bot

🚮 Removed packages: npm/@nestjs/[email protected], npm/@nestjs/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@typescript-eslint/[email protected], npm/@typescript-eslint/[email protected], npm/@vitejs/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link
Owner Author

@samchon samchon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Github Actions has been failed due to the NestJS's peerDependency bug of @nestjs/platform-fastify.

nestjs/nest#14450

Copy link

socket-security bot commented Jan 20, 2025

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Possible typosquat attack npm/[email protected] ⚠︎

View full report↗︎

Next steps

What is a typosquat?

Package name is similar to other popular packages and may not be the package you want.

Use care when consuming similarly named packages and ensure that you did not intend to consume a different package. Malicious packages often publish using similar names as existing popular packages.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

Copy link
Owner Author

@samchon samchon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Skipped fastify-multer problem for a while, but needs some handling.

@samchon samchon merged commit 09234a4 into master Jan 20, 2025
8 checks passed
@samchon samchon deleted the feat/nestjs branch January 20, 2025 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

1 participant