Skip to content

chore(deps): bump the prod-deps group with 14 updates - #139

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-31a5616f1d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-deps-31a5616f1d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 14 updates:

Package From To
@aws-sdk/client-s3 3.1144.0 3.1147.0
@aws-sdk/s3-presigned-post 3.1144.0 3.1147.0
@aws-sdk/s3-request-presigner 3.1144.0 3.1147.0
@keyv/valkey 1.0.11 6.1.0
@nestjs/cache-manager 3.1.3 12.0.1
@nestjs/common 11.2.7 12.1.2
@nestjs/core 11.2.7 12.1.2
@nestjs/platform-express 11.2.7 12.1.2
@nestjs/schedule 6.1.3 12.0.2
@nestjs/swagger 11.4.7 12.0.2
dotenv 18.0.5 18.0.6
iovalkey 0.3.3 0.4.0
keyv 5.6.0 6.1.0
nanoid 6.0.1 6.0.2

Updates @aws-sdk/client-s3 from 3.1144.0 to 3.1147.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

For list of updated packages, view updated-packages.md in assets-3.1147.0.zip

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/client-s3

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/client-s3

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/s3-presigned-post from 3.1144.0 to 3.1147.0

Release notes

Sourced from @​aws-sdk/s3-presigned-post's releases.

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

For list of updated packages, view updated-packages.md in assets-3.1147.0.zip

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-presigned-post's changelog.

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/s3-presigned-post

Commits

Updates @aws-sdk/s3-request-presigner from 3.1144.0 to 3.1147.0

Release notes

Sourced from @​aws-sdk/s3-request-presigner's releases.

v3.1147.0

3.1147.0(2026-10-06)

New Features
  • clients: update client endpoints as of 2026-10-06 (c2162728)
  • client-lambda-web: Removes operations that are not yet generally available from the Lambda Web. (b9da1cc4)
  • lib-transfer-manager: add opt-in O_DIRECT path for file downloads (#8319) (1e414f14)

For list of updated packages, view updated-packages.md in assets-3.1147.0.zip

v3.1146.0

3.1146.0(2026-10-02)

Documentation Changes
  • client-lambda-web: Documentation update for AWS Lambda Web Functions, clarifies that the LambdaWeb APIs are experimental and not yet available to external customers. (de11d1e1)
New Features
  • client-mediapackagev2: Dynamic Multiview enables viewers to watch multiple live video streams in a single combined output. Static filter configuration allows users to configure endpoints with layouts and sources without using query parameters. The number of sources per multiview channel has been increased to 50. (8a1ac09c)
  • client-invoicing: API and doc updates related to adding MarketplacePunchOutEnabled and MarketplacePunchOutPreference fields to ProcurementPortalPreferences related APIs (948be4b5)
  • client-glue: Added refresh token grant type to Glue Connection supported OAuth 2.0 grant types (6101fef0)
  • client-cognito-identity-provider: Amazon Cognito User Pools now supports the OIDC-standard authentication context class reference (ACR) and authentication methods reference (AMR) claims on issued access and Id tokens. Amazon Cognito User Pools also now supports step-up authentication via our existing authentication APIs. (196e191f)
  • client-pinpoint-sms-voice-v2: AWS End User Messaging SMS CarrierLookup API now supports phone number cleansing on customer opt-in. when selected, the response includes the additional field "OriginalPhoneNumber". It can also return additional PhoneNumberType enums, VOIP and PREPAID. (42d43613)
  • client-securityagent: Adds trigger filters that control which pull request events, target branches, and labels start an automatic code review. (3d73df94)

For list of updated packages, view updated-packages.md in assets-3.1146.0.zip

v3.1145.0

3.1145.0(2026-10-01)

Chores
Documentation Changes
  • client-ec2: This release launches the AMI tag sharing feature, which lets AMI owners share tags alongside their AMIs, eliminating the need to build and maintain custom tag replication workflows. (82608f8c)
New Features
  • clients: update client endpoints as of 2026-10-01 (5244c2a9)
  • client-bedrock-agent: Adds an optional textReadyAt field to ListIngestionJobs and GetIngestionJob for Managed Knowledge Bases data source sync jobs. The field denotes the timestamp at which all the documents in the scope of a sync job had their text content indexed and are available for retrieval. (a810c753)

... (truncated)

Changelog

Sourced from @​aws-sdk/s3-request-presigner's changelog.

3.1147.0 (2026-10-06)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1146.0 (2026-10-02)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

3.1145.0 (2026-10-01)

Note: Version bump only for package @​aws-sdk/s3-request-presigner

Commits

Updates @keyv/valkey from 1.0.11 to 6.1.0

Release notes

Sourced from @​keyv/valkey's releases.

v6.1.0

keyv@6.1.0 — 2026-10-06

First stable release of Keyv v6, published to npm's latest tag.

All 20 published packages release in lockstep at 6.1.0; there is no 6.0.0. @keyv/website is private and not published.

Coming from v5? Follow the v5 to v6 migration guide, or point your coding agent at https://keyv.org/skills/migrate. v5 stays in maintenance; install it with keyv@5.

⚠ BREAKING CHANGES

These are changes since 6.0.0-rc.1. Coming from v5, start with the migration guide.

  • keyv, adapters: the namespace separator option is namespaceSeparator on every adapter that joins the namespace and the key, and it defaults to ::; keySeparator and keyPrefixSeparator are gone (d0bc310, #2189) Migration from rc.1: rename the option. To keep reading namespaced data rc.1 wrote, set namespaceSeparator: ':' on the memory and bridge adapters, @keyv/etcd, @keyv/dynamo, @keyv/cloudflare-kv and @keyv/valkey. @keyv/redis already used :: in rc.1. Migration from v5: v5's Keyv also prefixed every key with <namespace>:, so the setting depends on the adapter. A default v5 @keyv/redis setup stored keyv::keyv:foo, which v6 reads with new Keyv(new KeyvRedis(uri, { namespaceSeparator: '::keyv:' }), { namespace: 'keyv' }). If you used createKeyv(), set only the same namespace. For other adapters, see The Default keyv Namespace Was Removed.
  • keyv: throwOnErrors is removed; a failed call returns a fallback value when an error listener is attached and rejects when none is (860dba7, #2155) Migration: remove throwOnErrors, and attach an error listener if you want fallback values instead of rejections.
  • keyv: a namespace set on the storage adapter is used when Keyv has none (c6e88e7, #2156) Migration: data rc.1 wrote in that setup has no namespace; remove the adapter's namespace to keep reading it, or let it refill.
  • keyv: a namespaced clear() fails instead of wiping a store it can't list (790eb3c, #2186) Migration: give the store keys() or iterator(), or call clear() on a Keyv instance without a namespace to empty it.
  • keyv: writes fail when an encryption adapter is set and serialization is off; rc.1 stored those values unencrypted (b73ee16, #2176) Migration: keep serialization on, which is the default, when you use encryption.
  • postgres, sqlite, mongo, dynamo, cloudflare-kv, etcd: keys that start with <namespace>: are stored as given instead of being treated as already prefixed (9dec04c, #2159) Migration: entries rc.1 wrote under such keys read as missing; write them again.
  • encrypt-node, encrypt-web: @keyv/encrypt-node accepts only AES-GCM, AES-CCM and ChaCha20-Poly1305 with base64, base64url or hex output, and @keyv/encrypt-web accepts only AES-GCM; AES-CBC is removed (b06ec8b, #2187) Migration: the defaults are unchanged; re-encrypt values written with any other algorithm or encoding before you upgrade.
  • dynamo: keys written without a TTL no longer expire, and sixHoursInMilliseconds is removed (476761d, #2161) Migration: set Keyv's ttl option for a default expiry, as in new Keyv(store, { ttl: 6 * 60 * 60 * 1000 }).
  • etcd: the lease property is removed, and the store ttl applies to each key from its own write (6ba3096, #2160) Migration: remove code that reads or sets store.lease.
  • etcd: without a namespace, clear() and iterator() only touch entries Keyv wrote without a namespace (8a77946, #2173) Migration: set noNamespaceAffectsAll: true for the rc.1 behavior, and namespaceSeparator: ':' while etcd still holds namespaced rc.1 entries.
  • memcache: clear() only removes the store's own entries, and values rc.1 wrote read as missing (12415c5, #2179) Migration: let the cache refill; set noNamespaceAffectsAll: true on a store without a namespace to flush the whole server.
  • bigmap: setting storeSize keeps every entry and no longer emits clear (b80b44d, #2178) Migration: call clear() yourself if you resized the map to empty it.

Features

  • add the keyv-migrate agent skill, which upgrades a project from Keyv v4 or v5 to v6; it is published at https://keyv.org/skills/migrate (bae30d5, #2171)

    npx skills add jaredwray/keyv --skill keyv-migrate
  • add a namespaceSeparator option to every adapter that joins the namespace and the key; it defaults to :: (d0bc310, #2189)

    import Keyv from 'keyv';
    import KeyvEtcd from '@keyv/etcd';

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​keyv/valkey since your current version.


Updates @nestjs/cache-manager from 3.1.3 to 12.0.1

Release notes

Sourced from @​nestjs/cache-manager's releases.

Release 12.0.1

What's Changed

New Contributors

Full Changelog: nestjs/cache-manager@12.0.0...12.0.1

Release 12.0.0

What's Changed

@nestjs/cache-manager is now a native ES module, and the major version is aligned with the Nest 12 release line (there is no 4.x — 3.1.3 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root:

import { CacheModule, CacheInterceptor, CacheKey, CacheTTL } from '@nestjs/cache-manager';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, CommonJS consumers can keep using require('@nestjs/cache-manager') unchanged — the exports map points both import and require at the same ESM build, and Node loads it natively.

This is why the supported Node range is now enforced via engines:

"engines": {
  "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
}

Those are the Node versions where require(esm) is available unflagged. On older Node versions, requiring this package from CommonJS will fail with ERR_REQUIRE_ESM.

Upgrading

npm i @nestjs/cache-manager@12

Checklist:

  • Ensure you're on Node ^20.19.0, ^22.12.0, or >=24.0.0.
  • Replace any deep imports (e.g. @nestjs/cache-manager/dist/...) with root imports.
  • No changes needed to CacheModule.register() / registerAsync(), interceptors, or decorators.
Commits
  • ba7b70a chore(): release v12.0.1
  • 867c15e chore(deps): update dependency @​types/node to v24.19.1 (#1186)
  • 0cb657c Merge pull request #1185 from nestjs/renovate/vite-8.x
  • 947038e chore(deps): update dependency vite to v8.3.3
  • 0deb091 Merge pull request #1183 from nestjs/renovate/oxlint-monorepo
  • 2ef8516 chore(deps): update dependency oxlint to v1.87.0
  • 872fd03 Merge pull request #1182 from nestjs/renovate/nest-monorepo
  • 4b42dba Merge pull request #1184 from nestjs/renovate/vitest-monorepo
  • 0bcad8a Merge pull request #1189 from nestjs/renovate/supertest-7.x
  • 8c43fc8 Merge pull request #1190 from nestjs/renovate/release-it-21.x
  • Additional commits viewable in compare view

Updates @nestjs/common from 11.2.7 to 12.1.2

Release notes

Sourced from @​nestjs/common's releases.

v12.1.1 (2026-09-28)

Bug fixes

  • common, core, microservices, testing
  • microservices
    • #17891 fix(microservices): let the mqtt client retry after a failed connect (@​hktitof)
    • #17888 fix(microservices): keep tcp event listeners across reconnects (@​KAPUIST)
    • #17887 fix(microservices): ignore events from a replaced tcp client socket (@​KAPUIST)
    • #17878 fix(microservices): keep a newer nats connection when a stale one fails (@​hktitof)
    • #17869 fix(microservices): keep a newer kafka connection when a stale one fails (@​kamilmysliwiec)
    • #17865 fix(microservices): let the rmq client retry after a failed connect (@​hktitof)
    • #17866 fix(microservices): reply on the request channel when redis wildcards are enabled (@​fadiroot)
    • #17861 fix(microservices): recover the nats client after it gives up reconnecting (@​xia-chao)
  • common
    • #17884 fix(common): preserve string enum values matching numeric member names (@​KAPUIST)
  • core
    • #17871 fix(core): detect circular dependencies across more than two providers (@​erezcor)
  • platform-fastify
    • #17867 fix(fastify): treat a JSON content type with parameters as JSON in reply() (@​fadiroot)
  • core, testing

Enhancements

Committers: 13

v12.1.0 (2026-09-23)

Bug fixes

... (truncated)

Commits
  • 8ab60aa chore(release): publish v12.1.2 release
  • ab3fb3d chore(release): publish v12.1.2 release
  • 50fb722 docs(core): fix resolve() @​returns tags to match their Promise signatures (#1...
  • 4ea29cc feat(common): export UUIDVersion and support 'all' and numeric versions in Pa...
  • a054312 fix(common): keep StreamableFile from mutating the caller options (#17925)
  • 41a3a54 feat(common): support uuid v1, v2, v6 and v8 in ParseUUIDPipe (#17904)
  • 9feedff chore(release): publish v12.1.1 release
  • daf6883 fix(common): logger bugs in json output, level changes, fatal and buffered lo...
  • 34c9965 fix(common): preserve string enum values matching numeric member names (#17884)
  • 1fbe1c5 fix(common): reject non-numeric items in ParseArrayPipe with items Number (#1...
  • Additional commits viewable in compare view

Updates @nestjs/core from 11.2.7 to 12.1.2

Release notes

Sourced from @​nestjs/core's releases.

v12.1.1 (2026-09-28)

Bug fixes

  • common, core, microservices, testing
  • microservices
    • #17891 fix(microservices): let the mqtt client retry after a failed connect (@​hktitof)
    • #17888 fix(microservices): keep tcp event listeners across reconnects (@​KAPUIST)
    • #17887 fix(microservices): ignore events from a replaced tcp client socket (@​KAPUIST)
    • #17878 fix(microservices): keep a newer nats connection when a stale one fails (@​hktitof)
    • #17869 fix(microservices): keep a newer kafka connection when a stale one fails (@​kamilmysliwiec)
    • #17865 fix(microservices): let the rmq client retry after a failed connect (@​hktitof)
    • #17866 fix(microservices): reply on the request channel when redis wildcards are enabled (@​fadiroot)
    • #17861 fix(microservices): recover the nats client after it gives up reconnecting (@​xia-chao)
  • common
    • #17884 fix(common): preserve string enum values matching numeric member names (@​KAPUIST)
  • core
    • #17871 fix(core): detect circular dependencies across more than two providers (@​erezcor)
  • platform-fastify
    • #17867 fix(fastify): treat a JSON content type with parameters as JSON in reply() (@​fadiroot)
  • core, testing

Enhancements

Committers: 13

v12.1.0 (2026-09-23)

Bug fixes

... (truncated)

Commits
  • 8ab60aa chore(release): publish v12.1.2 release
  • ab3fb3d chore(release): publish v12.1.2 release
  • 50fb722 docs(core): fix resolve() @​returns tags to match their Promise signatures (#1...
  • dee19bb fix(core): resolve durable global filters with the strategy's context id (#17...
  • 9feedff chore(release): publish v12.1.1 release
  • daf6883 fix(common): logger bugs in json output, level changes, fatal and buffered lo...
  • b1014b6 fix(core): detect circular dependencies across more than two providers (#17871)
  • b5f3273 fix(core): honor class and factory overrides of value providers (#17860)
  • 5100837 fix(core): recommend {*path} in the legacy wildcard warning (#17859)
  • 6739656 chore(release): publish v12.1.0 release
  • Additional commits viewable in compare view

Updates @nestjs/platform-express from 11.2.7 to 12.1.2

Release notes

Sourced from @​nestjs/platform-express's releases.

v12.1.1 (2026-09-28)

Bug fixes

  • common, core, microservices, testing
  • microservices
    • #17891 fix(microservices): let the mqtt client retry after a failed connect (@​hktitof)
    • #17888 fix(microservices): keep tcp event listeners across reconnects (@​KAPUIST)
    • #17887 fix(microservices): ignore events from a replaced tcp client socket (@​KAPUIST)
    • #17878 fix(microservices): keep a newer nats connection when a stale one fails (@​hktitof)
    • #17869 fix(microservices): keep a newer kafka connection when a stale one fails (@​kamilmysliwiec)
    • #17865 fix(microservices): let the rmq client retry after a failed connect (@​hktitof)
    • #17866 fix(microservices): reply on the request channel when redis wildcards are enabled (@​fadiroot)
    • #17861 fix(microservices): recover the nats client after it gives up reconnecting (@​xia-chao)
  • common
    • #17884 fix(common): preserve string enum values matching numeric member names (@​KAPUIST)
  • core
    • #17871 fix(core): detect circular dependencies across more than two providers (@​erezcor)
  • platform-fastify
    • #17867 fix(fastify): treat a JSON content type with parameters as JSON in reply() (@​fadiroot)
  • core, testing

Enhancements

Committers: 13

v12.1.0 (2026-09-23)

Bug fixes

... (truncated)

Commits
  • 8ab60aa chore(release): publish v12.1.2 release
  • ab3fb3d chore(release): publish v12.1.2 release
  • 1685a43 fix(express,fastify): keep +json content types on error replies (#17916)
  • 697ff89 fix(express,fastify): read media type version from any accept param
  • 9feedff chore(release): publish v12.1.1 release
  • 8ff59f3 fix(express): map multer array index and invalid field name codes to 400 (#17...
  • 6739656 chore(release): publish v12.1.0 release
  • fb5e699 fix: three typos (subcription x2, propery) (#17833)
  • 2dfba68 chore: update readme
  • 899dbe3 chore(release): publish v12.0.4 release
  • Additional commits viewable in compare view

Updates @nestjs/schedule from 6.1.3 to 12.0.2

Release notes

Sourced from @​nestjs/schedule's releases.

Release 12.0.2

  • feat(scheduler): add generic return type parameter to getInterval and getTimeout (a178f1b)
  • fix(cron): do not resurrect a deleted job after its initialDelay elapses (4473390)

Release 12.0.1

What's Changed

Full Changelog: nestjs/schedule@12.0.0...12.0.1

Release 12.0.0

What's Changed

@nestjs/schedule is now a native ES module, and the major version is aligned with the Nest 12 release line (there is no 7.x — 6.1.3 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts / index.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

// ✅
import { ScheduleModule, Cron, CronExpression } from '@nestjs/schedule';
// ❌ no longer resolvable
import { CronExpression } from '@​nestjs/schedule/dist/enums/cron-expression.enum';

Only . and ./package.json are exported.

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support, a CommonJS app can keep doing:

const { ScheduleModule } = require('@nestjs/schedule');

This is why the package now declares "engines": { "node": ">=20.19.0" } — require(esm) is unflagged from Node 20.19 / 22.12 onward. On older Node versions the require will throw ERR_REQUIRE_ESM.

Fixes

  • Duplicate scheduler names are now rejected at startup. Two @Cron, @Interval, or @Timeout declarations sharing an explicit name previously slipped past decorator collection and only conflicted later; the DUPLICATE_SCHEDULER error is now thrown during initialization, where you can actually see it.

Upgrading

npm i @nestjs/schedule@12

... (truncated)

Commits
  • 1de04b0 chore(): release v12.0.2
  • 4090c9e Merge pull request #2356 from nestjs/renovate/cimg-node-24.x
  • 680c949 Merge pull request #2359 from Asadshah7950/feat/scheduler-generic-interval-ti...
  • cdbaa32 Merge pull request #2344 from chuanghiduoc/fix/cron-initial-delay-resurrection
  • a178f1b feat(scheduler): add generic return type parameter to getInterval and getTimeout
  • 7a7ecdd chore(deps): update dependency vite to v8.3.0 (#2358)
  • 77fc72b chore(deps): update dependency lint-staged to v17.5.1 (#2357)
  • 80eec9d chore(deps): update dependency @​types/node to v24.13.4 (#2355)
  • 63ed7b8 chore(deps): update node.js to v24.21.0

Bumps the prod-deps group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1144.0` | `3.1147.0` |
| [@aws-sdk/s3-presigned-post](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-presigned-post) | `3.1144.0` | `3.1147.0` |
| [@aws-sdk/s3-request-presigner](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/s3-request-presigner) | `3.1144.0` | `3.1147.0` |
| [@keyv/valkey](https://github.com/jaredwray/keyv/tree/HEAD/storage/valkey) | `1.0.11` | `6.1.0` |
| [@nestjs/cache-manager](https://github.com/nestjs/cache-manager) | `3.1.3` | `12.0.1` |
| [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.7` | `12.1.2` |
| [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.7` | `12.1.2` |
| [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.7` | `12.1.2` |
| [@nestjs/schedule](https://github.com/nestjs/schedule) | `6.1.3` | `12.0.2` |
| [@nestjs/swagger](https://github.com/nestjs/swagger) | `11.4.7` | `12.0.2` |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.5` | `18.0.6` |
| [iovalkey](https://github.com/valkey-io/iovalkey) | `0.3.3` | `0.4.0` |
| [keyv](https://github.com/jaredwray/keyv) | `5.6.0` | `6.1.0` |
| [nanoid](https://github.com/ai/nanoid) | `6.0.1` | `6.0.2` |


Updates `@aws-sdk/client-s3` from 3.1144.0 to 3.1147.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/clients/client-s3)

Updates `@aws-sdk/s3-presigned-post` from 3.1144.0 to 3.1147.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-presigned-post/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/packages/s3-presigned-post)

Updates `@aws-sdk/s3-request-presigner` from 3.1144.0 to 3.1147.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/s3-request-presigner/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1147.0/packages/s3-request-presigner)

Updates `@keyv/valkey` from 1.0.11 to 6.1.0
- [Release notes](https://github.com/jaredwray/keyv/releases)
- [Commits](https://github.com/jaredwray/keyv/commits/v6.1.0/storage/valkey)

Updates `@nestjs/cache-manager` from 3.1.3 to 12.0.1
- [Release notes](https://github.com/nestjs/cache-manager/releases)
- [Commits](nestjs/cache-manager@3.1.3...12.0.1)

Updates `@nestjs/common` from 11.2.7 to 12.1.2
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.1.2/packages/common)

Updates `@nestjs/core` from 11.2.7 to 12.1.2
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.1.2/packages/core)

Updates `@nestjs/platform-express` from 11.2.7 to 12.1.2
- [Release notes](https://github.com/nestjs/nest/releases)
- [Commits](https://github.com/nestjs/nest/commits/v12.1.2/packages/platform-express)

Updates `@nestjs/schedule` from 6.1.3 to 12.0.2
- [Release notes](https://github.com/nestjs/schedule/releases)
- [Commits](nestjs/schedule@6.1.3...12.0.2)

Updates `@nestjs/swagger` from 11.4.7 to 12.0.2
- [Release notes](https://github.com/nestjs/swagger/releases)
- [Commits](nestjs/swagger@11.4.7...12.0.2)

Updates `dotenv` from 18.0.5 to 18.0.6
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.5...v18.0.6)

Updates `iovalkey` from 0.3.3 to 0.4.0
- [Release notes](https://github.com/valkey-io/iovalkey/releases)
- [Commits](https://github.com/valkey-io/iovalkey/commits/v0.4.0)

Updates `keyv` from 5.6.0 to 6.1.0
- [Release notes](https://github.com/jaredwray/keyv/releases)
- [Commits](https://github.com/jaredwray/keyv/commits/v6.1.0)

Updates `nanoid` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@6.0.1...6.0.2)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1147.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@aws-sdk/s3-presigned-post"
  dependency-version: 3.1147.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@aws-sdk/s3-request-presigner"
  dependency-version: 3.1147.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: "@keyv/valkey"
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@nestjs/cache-manager"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@nestjs/common"
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@nestjs/core"
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@nestjs/platform-express"
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@nestjs/schedule"
  dependency-version: 12.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: "@nestjs/swagger"
  dependency-version: 12.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: dotenv
  dependency-version: 18.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: iovalkey
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: keyv
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: nanoid
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 10, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants