fix(deps): update weekly-non-major-updates by renovate[bot] · Pull Request #88 · Aam-Digital/ndb-admin

renovate · 2026-02-04T01:44:40Z

This PR contains the following updates:

Package	Change	Age	Confidence
@nestjs/common (source)	`^11.1.12` → `^11.1.13`
@nestjs/config	`^4.0.2` → `^4.0.3`
@nestjs/core (source)	`^11.1.12` → `^11.1.13`
@nestjs/platform-express (source)	`^11.1.12` → `^11.1.13`
@nestjs/swagger	`^11.2.5` → `^11.2.6`
@nestjs/testing (source)	`^11.1.12` → `^11.1.13`
@sentry/nestjs (source)	`^10.37.0` → `^10.38.0`
@sentry/profiling-node (source)	`^10.37.0` → `^10.38.0`
@types/node (source)	`^24.10.9` → `^24.10.12`
axios (source)	`^1.13.4` → `^1.13.5`

Release Notes

nestjs/nest (@nestjs/common)

`v11.1.13`

Compare Source

nestjs/config (@nestjs/config)

`v4.0.3`

Compare Source

What's Changed

fix(deps): update dependency lodash to v4.17.23 [security] by @renovate[bot] in #2250
fix(deps): update dependency dotenv-expand to v12.0.3 by @renovate[bot] in #2146
fix(deps): update dependency dotenv to v17 by @renovate[bot] in #2100

Full Changelog: nestjs/config@4.0.2...4.0.3

nestjs/nest (@nestjs/core)

`v11.1.13`

Compare Source

nestjs/nest (@nestjs/platform-express)

`v11.1.13`

Compare Source

v11.1.13 (2026-02-03)

Bug fixes

common
- #16230 fix(common): Fix skipping maxArrayLength and maxStringLength option (@chojs23)

Enhancements

microservices
- #16286 feat(microservices): support per-handler qos in mqtt (@suuuuuuminnnnnn)
- #16262 Feat/microservices configurable max buffer size (@jobnow)
common
- #16202 fix(common): exclude built-in primitives from strip proto keys (@som14062005)

Dependencies

platform-fastify
- #16282 fix(deps): update dependency fastify to v5.7.4 (@renovate[bot])
platform-express
- #16241 fix(deps): update dependency cors to v2.8.6 (@renovate[bot])

Committers: 6

Lee Donghyun (@devizi0)
Mykhailo Skrypsky (@mixator)
Neo (@chojs23)
Praveen Somasundaram (@som14062005)
Ricardo Gomes (@jobnow)
조수민 (@suuuuuuminnnnnn)

nestjs/swagger (@nestjs/swagger)

`v11.2.6`

Compare Source

What's Changed

feat: support adding custom fields on the servers[*] entry by @micalevisk in #3715
fix(decorator) add string literal types to ApiQueryOptions for autoco… by @wanderer-s in #3707
feat: add type definition for format option in @ApiProperty decorator by @ismaildasci in #3697
fix(deps): update dependency lodash to v4.17.23 [security] by @renovate[bot] in #3705

New Contributors

@wanderer-s made their first contribution in #3707
@ismaildasci made their first contribution in #3697

Full Changelog: nestjs/swagger@11.2.5...11.2.6

getsentry/sentry-javascript (@sentry/nestjs)

`v10.38.0`

Compare Source

Important Changes

feat(tanstackstart-react): Auto-instrument request middleware (#18989)

The sentryTanstackStart Vite plugin now automatically instruments middleware arrays in createFileRoute(). This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

Other Changes

feat: Use v4.8.0 bundler plugins (#18993)
feat(browser): Add logs.metrics bundle (#19020)
feat(browser): Add replay.logs.metrics bundle (#19021)
feat(browser): Add tracing.replay.logs.metrics bundle (#19039)
feat(deps): bump import-in-the-middle from 2.0.1 to 2.0.6 (#19042)
feat(node): Add AI manual instrumentation exports to Node (#19063)
feat(wasm): initialised sentryWasmImages for webworkers (#18812)
fix(core): Classify custom AggregateErrors as exception groups (#19053)
fix(nextjs): Turn off debugID injection if sourcemaps are explicitly disabled (#19010)
fix(react): Avoid String(key) to fix Symbol conversion error (#18982)
fix(react): Prevent lazy route handlers from updating wrong navigation span (#18898)

Internal Changes

- feat(deps-dev): bump @types/rsvp from 4.0.4 to 4.0.9 ([#19038](https://redirect.github.com/getsentry/sentry-javascript/pull/19038)) - ci(build): Run full test suite on new bundle with logs+metrics ([#19065](https://redirect.github.com/getsentry/sentry-javascript/pull/19065)) - ci(deps): bump actions/create-github-app-token from 1 to 2 ([#19028](https://redirect.github.com/getsentry/sentry-javascript/pull/19028)) - ci(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ([#19029](https://redirect.github.com/getsentry/sentry-javascript/pull/19029)) - chore: Add external contributor to CHANGELOG.md ([#19005](https://redirect.github.com/getsentry/sentry-javascript/pull/19005)) - chore(aws-serverless): Fix local cache issues ([#19081](https://redirect.github.com/getsentry/sentry-javascript/pull/19081)) - chore(dependabot): Allow all packages to update ([#19024](https://redirect.github.com/getsentry/sentry-javascript/pull/19024)) - chore(dependabot): Update ignore patterns and add more groups ([#19037](https://redirect.github.com/getsentry/sentry-javascript/pull/19037)) - chore(dependabot): Update ignore patterns and add more groups ([#19043](https://redirect.github.com/getsentry/sentry-javascript/pull/19043)) - chore(deps-dev): bump @edge-runtime/types from 3.0.1 to 4.0.0 ([#19032](https://redirect.github.com/getsentry/sentry-javascript/pull/19032)) - chore(deps-dev): bump @vercel/nft from 0.29.4 to 1.3.0 ([#19030](https://redirect.github.com/getsentry/sentry-javascript/pull/19030)) - chore(deps): bump @actions/artifact from 2.1.11 to 5.0.3 ([#19031](https://redirect.github.com/getsentry/sentry-javascript/pull/19031)) - chore(deps): bump hono from 4.11.4 to 4.11.7 in /dev-packages/e2e-tests/test-applications/cloudflare-hono ([#19009](https://redirect.github.com/getsentry/sentry-javascript/pull/19009)) - chore(deps): bump next from 16.0.9 to 16.1.5 in /dev-packages/e2e-tests/test-applications/nextjs-16-cacheComponents ([#19012](https://redirect.github.com/getsentry/sentry-javascript/pull/19012)) - chore(deps): Bump trpc v11 dependency in e2e test ([#19061](https://redirect.github.com/getsentry/sentry-javascript/pull/19061)) - chore(deps): Bump wrangler to 4.61.0 ([#19023](https://redirect.github.com/getsentry/sentry-javascript/pull/19023)) - chore(deps): Upgrade @remix-run deps to 2.17.4 ([#19040](https://redirect.github.com/getsentry/sentry-javascript/pull/19040)) - chore(deps): Upgrade `next` versions 15 and 16 ([#19057](https://redirect.github.com/getsentry/sentry-javascript/pull/19057)) - chore(deps): Upgrade Lerna to v8 ([#19050](https://redirect.github.com/getsentry/sentry-javascript/pull/19050)) - chore(deps): Upgrade next to 14.2.35 ([#19055](https://redirect.github.com/getsentry/sentry-javascript/pull/19055)) - chore(deps): Upgrade react-router, @react-router/node, @react-router/serve, @react-router/dev to 7.13.0 ([#19026](https://redirect.github.com/getsentry/sentry-javascript/pull/19026)) - chore(llm): Add claude skill + cursor command for adding new cdn bundles ([#19048](https://redirect.github.com/getsentry/sentry-javascript/pull/19048)) - chore(llm): Ignore local Claude settings ([#18893](https://redirect.github.com/getsentry/sentry-javascript/pull/18893)) - chore(react): Update react-router-5 dev dependency to another than 5.0.0 ([#19047](https://redirect.github.com/getsentry/sentry-javascript/pull/19047)) - chore(release): Add generate-changelog script ([#18999](https://redirect.github.com/getsentry/sentry-javascript/pull/18999)) - chore(remix): Upgrade @remix-run/router to ^1.23.2 ([#19045](https://redirect.github.com/getsentry/sentry-javascript/pull/19045)) - chore(solidstart): Bump peer dependencies of @solidjs/start ([#19051](https://redirect.github.com/getsentry/sentry-javascript/pull/19051)) - chore(solidstart): Upgrade Vinxi to update h3 peer dependency ([#19018](https://redirect.github.com/getsentry/sentry-javascript/pull/19018)) - chore(tests): Reject messages from unknown origins in integration tests ([#19016](https://redirect.github.com/getsentry/sentry-javascript/pull/19016))

Work in this release was contributed by @harshit078. Thank you for your contribution!

axios/axios (axios)

`v1.13.5`

Compare Source

Release 1.13.5

Highlights

Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

Fix/5657. (PR #7313)
Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

Add input validation to isAbsoluteURL. (PR #7326)
Refactor: bump minor package versions. (PR #7356)

Documentation

Clarify object-check comment. (PR #7323)
Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

Chore: fix issues with YAML. (PR #7355)
CI: update workflow YAMLs. (PR #7372)
CI: fix run condition. (PR #7373)
Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

@sachin11063 (first contribution — PR #7323)
@asmitha-16 (first contribution — PR #7326)

Full Changelog: axios/axios@v1.13.4...v1.13.5

Configuration

📅 Schedule: Branch creation - "after 00:00 and before 04:00 on Wednesday" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2026-02-04T01:44:51Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🔍 Trigger a full review

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

renovate bot added the dependencies Pull requests that update a dependency file label Feb 4, 2026

renovate bot requested review from Abhinegi2 and sleidig February 4, 2026 01:44

renovate bot force-pushed the renovate/weekly-non-major-updates branch 3 times, most recently from 23efffe to 98af0bc Compare February 8, 2026 01:05

fix(deps): update weekly-non-major-updates

552e3cd

renovate bot force-pushed the renovate/weekly-non-major-updates branch from 98af0bc to 552e3cd Compare February 8, 2026 12:49

sleidig approved these changes Feb 9, 2026

View reviewed changes

sleidig merged commit 5e55257 into main Feb 9, 2026
5 checks passed

sleidig deleted the renovate/weekly-non-major-updates branch February 9, 2026 16:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update weekly-non-major-updates#88

fix(deps): update weekly-non-major-updates#88
sleidig merged 1 commit intomainfrom
renovate/weekly-non-major-updates

renovate bot commented Feb 4, 2026 •

edited

Loading

Uh oh!

coderabbitai bot commented Feb 4, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v11.1.13

v4.0.3

What's Changed

v11.1.13

v11.1.13

v11.1.13 (2026-02-03)

Bug fixes

Enhancements

Dependencies

Committers: 6

v11.2.6

What's Changed

New Contributors

v10.38.0

Important Changes

Other Changes

v1.13.5

Release 1.13.5

Highlights

Changes

Security

Fixes

Features / Improvements

Documentation

CI / Maintenance

New Contributors

Configuration

Uh oh!

coderabbitai bot commented Feb 4, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Feb 4, 2026 •

edited

Loading

`v11.1.13`

`v4.0.3`

`v11.1.13`

`v11.1.13`

`v11.2.6`

`v10.38.0`

`v1.13.5`