chore(deps): update typescript-projects

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@better-svelte-email/cli (source)	2.1.3 → 2.3.0
@better-svelte-email/components (source)	2.1.3 → 2.3.0
@better-svelte-email/server (source)	2.1.3 → 2.3.0
@nestjs/cli	11.0.14 → 11.0.24
@nestjs/common (source)	11.1.13 → 11.2.7
@nestjs/core (source)	11.1.18 → 11.2.7
@nestjs/event-emitter	3.0.1 → 3.1.0
@nestjs/platform-express (source)	11.1.11 → 11.2.7
@nestjs/platform-socket.io (source)	11.1.14 → 11.2.7
@nestjs/schedule	6.1.1 → 6.1.3
@nestjs/schematics	11.0.9 → 11.1.0
@nestjs/swagger	11.2.5 → 11.4.7
@nestjs/testing (source)	11.1.11 → 11.2.7
@nestjs/websockets (source)	11.1.14 → 11.2.7
@opentelemetry/api (source)	1.9.0 → 1.9.1
@opentelemetry/context-async-hooks (source)	2.7.1 → 2.11.0
@opentelemetry/core (source)	2.9.0 → 2.11.0
@opentelemetry/propagator-b3 (source)	2.7.1 → 2.11.0
@opentelemetry/propagator-jaeger (source)	2.9.0 → 2.11.0
@opentelemetry/resources (source)	2.7.1 → 2.11.0
@types/oidc-provider (source)	9.5.0 → 9.12.1
better-sqlite3	12.6.2 → 12.11.1
eslint-plugin-prettier	5.5.4 → 5.5.6
marked (source)	18.0.11 → 18.0.14
nestjs-otel	8.0.2 → 8.1.1
oidc-provider	9.8.3 → 9.12.2
pnpm (source)	10.28.1 → 10.34.6
pnpm (source)	10.27.0 → 10.34.6
pnpm (source)	10.28.1+sha512.7d7dbbca9e99447b7c3bf7a73286afaaf6be99251eb9498baefa7d406892f67b879adb3a1d7e687fc4ccc1a388c7175fbaae567a26ab44d1067b54fcb0d6a316 → 10.34.6
pnpm (source)	10.28.1 → 10.34.6
postgres	3.4.8 → 3.4.9
prettier (source)	3.9.6 → 3.9.9
socket.io-client (source)	4.8.3 → 4.8.4
supertest	7.2.2 → 7.3.0
tsx (source)	4.21.0 → 4.23.15
typescript-eslint (source)	8.52.0 → 8.71.0
wrangler (source)	4.127.0 → 4.146.0
zod (source)	4.4.3 → 4.6.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

Konixy/better-svelte-email (@​better-svelte-email/cli)

v2.3.0

Compare Source

Minor Changes

• a48126a: Added an option to disable tailwind and skip tailwind-related compilation when rendering.

Patch Changes

• Updated dependencies [a48126a]
  • @​better-svelte-email/preview-server@2.3.0
  • @​better-svelte-email/server@2.3.0

v2.2.0

Compare Source

Minor Changes

• 35ac9f6: Added support for the new Tailwind v4.3 colors (mauve, olive, mist and taupe).

Patch Changes

• Updated dependencies [35ac9f6]
  • @​better-svelte-email/preview-server@2.2.0
  • @​better-svelte-email/server@2.2.0

v2.1.4

Compare Source

Patch Changes

• 827a794: Update dependencies version (fixed cve for html-to-text)
• Updated dependencies [827a794]
  • @​better-svelte-email/preview-server@2.1.4
  • @​better-svelte-email/server@2.1.4

Konixy/better-svelte-email (@​better-svelte-email/components)

v2.3.0

Compare Source

Minor Changes

• a48126a: Added an option to disable tailwind and skip tailwind-related compilation when rendering.

v2.2.0

Compare Source

Minor Changes

• 35ac9f6: Added support for the new Tailwind v4.3 colors (mauve, olive, mist and taupe).

v2.1.4

Compare Source

Patch Changes

• 827a794: Update dependencies version (fixed cve for html-to-text)

Konixy/better-svelte-email (@​better-svelte-email/server)

v2.3.0

Compare Source

Minor Changes

• a48126a: Added an option to disable tailwind and skip tailwind-related compilation when rendering.

v2.2.0

Compare Source

Minor Changes

• 35ac9f6: Added support for the new Tailwind v4.3 colors (mauve, olive, mist and taupe).

v2.1.4

Compare Source

Patch Changes

• 827a794: Update dependencies version (fixed cve for html-to-text)

nestjs/nest-cli (@​nestjs/cli)

v11.0.24

Compare Source

• fix(compiler): fail fast when typescript lacks the programmatic api (3c6b4ac)
• refactor: move available languages closer to first usage (1697b7f)
• refactor: delete unused gulp tool utility helper file (75b57c4)
• fix(runners): remove duplicated binary in failed command message (54b08ae)

v11.0.23

Compare Source

• Revert "fix(compiler): validate delete out dir paths before rm" (0dd0e3e)
• Revert "fix(compiler): validate asset output paths" (728f80c)

v11.0.22

Compare Source

• fix(cli): resolve Windows path separator bug in plugin loader (9e502bd)
• fix(compiler): validate asset output paths (c4342b2)
• fix: Update CRUD option to accept a value for generating entry points (4c0e2ca)
• feat: Add type and CRUD options in generate command (b19856a)

v11.0.21

Compare Source

• fix: revert #​3315 due to #​3390 (255a559)

v11.0.20

Compare Source

• fix: revert #​3313 due to #​3391 and #​3390 (705bb7d)
• chore(deps): update swc monorepo (8496c76)
• fix(assets-manager): return promise from close watchers (2181947)
• fix(swc): fix inverted chokidar ignored filter in watch mode (a3890cb)
• fix: add type annotations to caught errors (c46ddd7)

v11.0.19

Compare Source

What's Changed

• fix(types): correct Asset type definition from string literal to string union by @​yogeshwaran-c in #​3323
• fix(generate): use selected project name for specFileSuffix lookup by @​yogeshwaran-c in #​3325
• fix(info): add missing space in os version display by @​yogeshwaran-c in #​3321
• fix(compiler): run tsconfig paths plugin before user plugins in tsc compiler by @​yogeshwaran-c in #​3326
• fix(start): skip signal forwarding in watch mode by @​maruthang in #​3338
• feat(compiler): resolve path aliases in declaration files by @​maruthang in #​3344
• fix(deps): update angular-cli monorepo to v19.2.24 by @​renovate[bot] in #​3337

Full Changelog: nestjs/nest-cli@11.0.18...11.0.19

v11.0.18

Compare Source

What's Changed

• fix(build): delete tsbuildinfo file with out dir (#​3312) by @​maruthang in #​3317
• fix(swc): prevent double initialization in watch mode by @​maruthang in #​3316
• fix(swc): respect root dir option for strip leading paths by @​maruthang in #​3318
• fix(cli): error on unexpected extra positional arguments by @​maruthang in #​3314
• fix(start): wait for async shutdown hooks before exiting by @​maruthang in #​3313
• fix(assets): use ready event for watcher closing by @​maruthang in #​3315
• fix: expand @​swc/cli peer range to include ^0.8.0 by @​wwenrr in #​3309
• chore(deps): update dependency @​nestjs/schematics to v11.0.10 by @​renovate[bot] in #​3300
• refactor(compiler): potential undefined access in getWebpackConfigPath by @​zendy199x in #​3296
• fix(deps): update angular-cli monorepo to v19.2.23 by @​renovate[bot] in #​3299

New Contributors

• @​maruthang made their first contribution in #​3317
• @​wwenrr made their first contribution in #​3309
• @​zendy199x made their first contribution in #​3296

Full Changelog: nestjs/nest-cli@11.0.17...11.0.18

v11.0.17

Compare Source

What's Changed

• fix(deps): update angular-cli monorepo to v19.2.23 by @​renovate[bot] in #​3274
• fix(deps): update dependency webpack to v5.105.4 by @​renovate[bot] in #​3273
• fix(deps): update dependency glob to v13.0.6 by @​renovate[bot] in #​3271

Full Changelog: nestjs/nest-cli@11.0.16...11.0.17

v11.0.16

Compare Source

• Merge pull request #​3246 from nestjs/revert-3183-renovate/inquirer-prompts-8.x (a93d919)
• Revert "fix(deps): update dependency @​inquirer/prompts to v8" (a335950)

v11.0.15

Compare Source

What's Changed

• chore(deps): update dependency @​swc/core to v1.15.8 by @​renovate[bot] in #​3230
• chore(deps): update dependency @​swc/cli to v0.7.10 by @​renovate[bot] in #​3242
• fix(utils): tree-kill use spawn sync to fix node 24 crash by @​LucM in #​3235
• fix(deps): update dependency webpack to v5.104.1 by @​renovate[bot] in #​3221
• chore(deps): update node.js to v24.13.0 by @​renovate[bot] in #​3214
• fix(deps): update dependency @​inquirer/prompts to v8 by @​renovate[bot] in #​3183

New Contributors

• @​LucM made their first contribution in #​3235

Full Changelog: nestjs/nest-cli@11.0.14...11.0.15

nestjs/nest (@​nestjs/common)

v11.2.7

Compare Source

v11.2.6

Compare Source

What's changed

• @nestjs/platform-express
  • fix(deps): update dependency multer to v2.4.0 [security] — fixes CVE-2026-88932 (GHSA-3pph-fpjx-jg34)
  • fix(express): map multer errors by code instead of message — backport of #​17769; a file sent under an unexpected field name now returns 400 again instead of 500 with multer 2.4.0

Full Changelog: nestjs/nest@v11.2.5...v11.2.6

v11.2.5

Compare Source

What's changed

• @nestjs/microservices
  • fix(microservices): harden the tcp transport against a hostile peer

Full Changelog: nestjs/nest@v11.2.4...v11.2.5

v11.2.4

Compare Source

What's changed

• fix(microservices): handle unserializable patterns without crashing
• fix(platform-fastify): absolute-form request target middleware bypass

v11.2.3

Compare Source

What's Changed

• fix(core): circular durable providers issue by @​kamilmysliwiec in #​17563

Full Changelog: nestjs/nest@v11.2.2...v11.2.3

v11.2.2

Compare Source

What's changed

• fix(core): ObserveInstrument breaks app startup with @​nestjs/core@11.2.x #​17554 by @​kamilmysliwiec
• fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #​17553 by @​kamilmysliwiec

v11.2.1

Compare Source

What's Changed

• fix(core): early-return SSE abort issue by @​kamilmysliwiec

Full Changelog: nestjs/nest@v11.2.0...v11.2.1

v11.2.0

Compare Source

What's Changed

• fix(core): share existing singleton providers with lazily loaded modules by @​shariyerShazan in #​17430
• fix(common): match string file types containing regex metacharacters by @​Jaybhade in #​17435
• fix(core): convert adjacent wildcard segments in legacy route converter by @​eeshsaxena in #​17416
• fix(fastify): run middleware on routes excluded from global prefix by @​Arun445 in #​17377
• fix(fastify): avoid double prefixing inherited middleware by @​GiHoon1123 in #​17350
• fix(core): scan pre-registered dynamic imports of lazy modules by @​johnnyhuirilef in #​17464
• feat(core,common,platform-fastify): add query http method support by @​gacardinal in #​17162
• fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @​LeSingh1 in #​17086
• test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @​brayanjeshua in #​17310
• feat(core): sse signal by @​kamilmysliwiec in #​17469
• chore(deps): update dependency fastify to v5.12.0 by @​renovate[bot] in #​17473

New Contributors

• @​shariyerShazan made their first contribution in #​17430
• @​Jaybhade made their first contribution in #​17435
• @​eeshsaxena made their first contribution in #​17416
• @​Arun445 made their first contribution in #​17377
• @​GiHoon1123 made their first contribution in #​17350
• @​johnnyhuirilef made their first contribution in #​17464
• @​gacardinal made their first contribution in #​17162
• @​LeSingh1 made their first contribution in #​17086
• @​brayanjeshua made their first contribution in #​17310

Full Changelog: nestjs/nest@v11.1.29...v11.2.0

v11.1.29

Compare Source

What's Changed

• fix(core): stop import lookup after first direct export match by @​malekelkssas in #​17141
• chore: update multerExceptions constant by @​bo0tzz in #​17328
• fix(microservices): correct pub/sub client type in redis listeners by @​zaewc in #​17331
• feat(common): add override mimetype option to file type validator by @​Ativ3k in #​17333
• fix(core): drop the g flag from middleware overlap regexes by @​dchaudhari7177 in #​17335
• feat(core): support sse comments by @​kyu4583 in #​17327
• fix(core): resolve barrier immediately when target count is zero by @​ikrbasak in #​17393
• fix(common): exclude pipe options from validator options by @​coxxny in #​17399
• fix(core): serialize SSE retry field when value is zero by @​kyu4583 in #​17360
• fix(microservices): nullify grpcclient on close when tryshutdown fails by @​Se3do in #​17394
• fix(express): map missing multer field nesting error by @​Se3do in #​17421

New Contributors

• @​malekelkssas made their first contribution in #​17141
• @​hjc0930 made their first contribution in #​17311
• @​bo0tzz made their first contribution in #​17328
• @​Ativ3k made their first contribution in #​17333
• @​dchaudhari7177 made their first contribution in #​17335
• @​kyu4583 made their first contribution in #​17327
• @​anupamme made their first contribution in #​17378
• @​ikrbasak made their first contribution in #​17393
• @​beiifeng made their first contribution in #​17404
• @​coxxny made their first contribution in #​17399

Full Changelog: nestjs/nest@v11.1.28...v11.1.29

v11.1.28

Compare Source

v11.1.28 (2026-07-08)

Bug fixes

• core
  • #​17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@​jyx-07)
• common
  • #​17257 fix(common): Add missing exception classes to HttpErrorByCode (@​Se3do)
• websockets
  • #​17188 fix(websockets): correct type guard to check value not key (@​Se3do)

Enhancements

• core
  • #​17241 feat(core): include auto-converted route in legacy route path warning (@​ronielli)

Dependencies

• platform-fastify
  • #​17262 chore(deps): bump fastify from 5.8.5 to 5.10.0 (@​dependabot[bot])
• platform-express
  • #​17164 fix(deps): update dependency multer to v2.2.0 [security] (@​renovate[bot])

Committers: 4

• Mohammed Said (@​Se3do)
• Ronielli (@​ronielli)
• greymoth (@​greymoth-jp)
• 종윤 (@​jyx-07)

v11.1.27

Compare Source

What's Changed

• fix(core): sse async handlers teardown issue by @​kamilmysliwiec in #​17131
• fix(platform-fastify): forRoutes middleware ending slash by @​kamilmysliwiec in #​17138

Full Changelog: nestjs/nest@v11.1.26...v11.1.27

v11.1.26

Compare Source

What's Changed

• fix(core): post sse endpoint empty response #​17098 by @​kamilmysliwiec in #​17099

Full Changelog: nestjs/nest@v11.1.25...v11.1.26

v11.1.25

Compare Source

What's Changed

• fix(microservices): reject pending Redis requests on close by @​yudin-s in #​17024
• fix(core): register SSE close listener before async setup by @​fallintoplace in #​17018
• fix(platform-fastify): remove pathname ending slash by @​kamilmysliwiec in #​17094

New Contributors

• @​fallintoplace made their first contribution in #​17018
• @​DucMinhNe made their first contribution in #​17085
• @​iambeaukim made their first contribution in #​17091

Full Changelog: nestjs/nest@v11.1.24...v11.1.25

v11.1.24

Compare Source

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #​17009 fix(core): reset dependency-tree cache on metadata changes (@​puneetdixit200)

Enhancements

• core
  • #​16997 feat(core): warn on late websocket adapter registration (@​hbinhng)

Dependencies

• platform-ws
  • #​17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@​dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@​hbinhng)
• Puneet Dixit (@​puneetdixit200)

v11.1.23

Compare Source

v11.1.23 (2026-05-21)

Bug fixes

• core
  • #​16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.22

Compare Source

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #​16993 fix(core): inflight request injection bug #​16989 (@​kamilmysliwiec)

Enhancements

• core
  • #​16967 fix(core): identify decorator type in invalid-class-module error (@​HarrierOnChain)

Committers: 2

• Harrier (@​HarrierOnChain)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.21

Compare Source

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #​16948 fix(core): settle skipped provider initialization (@​yudin-s)

Committers: 1

• Serge Yudin (@​yudin-s)

v11.1.20

Compare Source

v11.1.20 (2026-05-13)

Bug fixes

• core, testing
  • #​16939 fix(core): fix deeply nested transient providers resolution (@​kamilmysliwiec)
• core
  • #​16861 fix(core): fix @​Sse losing events on complete (@​MatthiasBrehmer)
  • #​16753 fix(core): defer sse writehead until after lifecycle completes (@​jkalberer)
  • #​16782 fix(core): use strict null check for SSE message id (@​burhanharoon)
• microservices
  • #​16850 fix(microservices): ServerRMQ crashes at boot when @​MessagePattern(undefined) is combined with wildcards: true (@​lavieennoir)
• common
  • #​16845 fix(common): accept zero timestamp in parse date pipe (@​Mysh3ll)
• platform-socket.io
  • #​16742 fix(socket.io): Deduplicate disconnect listener in bindMessageHandlers (@​fru1tworld)

Enhancements

• microservices
  • #​16676 feat(microservices): add return buffers option for binary data (@​Forceres)
  • #​16826 feat(microservices): handle rmq blocked/unblocked connection events (@​thisalihassan)
• common
  • #​16902 fix(common): filetype validator buffer message (@​QusaiAlbonni)
• platform-express
  • #​16844 feat(platform-express): add defParamCharset to MulterOptions (@​starnayuta)

Dependencies

• platform-ws
  • #​16941 chore(deps): bump ws from 8.20.0 to 8.20.1 (@​dependabot[bot])

Committers: 13

• Ali Hassan (@​thisalihassan)
• Burhan Haroon⚡ (@​burhanharoon)
• Dmytro Khyzhniak (@​lavieennoir)
• Harsh Rathod (@​harshrathod50)
• IlyaCredo (@​Forceres)
• Kamil Mysliwiec (@​kamilmysliwiec)
• Mysh3ll (@​Mysh3ll)
• @​MatthiasBrehmer
• @​QusaiAlbonni
• @​jkalberer
• @​pazaderey
• fru1tworld (@​fru1tworld)
• starnayuta (@​starnayuta)

v11.1.19

Compare Source

v11.1.19 (2026-04-13)

Bug fixes

• microservices
  • #​16762 fix(microservices): use backing field for consumer CRASH event listener (@​burhanharoon)
  • #​16764 fix(microservices): prevent stack overflow in jsonsocket.handledata() (@​kamilmysliwiec)

Committers: 2

• Burhan Haroon⚡ (@​burhanharoon)
• Kamil Mysliwiec (@​kamilmysliwiec)

v11.1.18

Compare Source

v11.1.18 (2026-04-03)

Bug fixes

• microservices
  • #​16675 fix(microservices): preserve packet headers in nats serializer ([@​wwenrr](https://redirect.github.co

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on tuesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm warn Unknown project config "node-linker". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code EUNSUPPORTEDPROTOCOL
npm error Unsupported URL Type "catalog:": catalog:
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-06T21_56_24_371Z-debug-0.log

[greptile-apps]

PR author is in the excluded authors list.

[github-actions]

Docs preview (3aeda084fd2eb72af5cfcda663c5b3d3e6b24098)

https://docs.pr-358.dev.futo.cloud

[futo-kritika]

Kritika Review

Updates TypeScript dependencies and synchronizes package-manager pins.

No findings

Confidence 4/5 · high risk: No findings were reported. My own concern is a pnpm jump of six minor versions (10.28.1 to 10.34.6) that touches the toolchain and CI-pinned versions. The zod bump from 4.4.3 to 4.6.5 is a runtime dependency. The lockfile was omitted from the diff, so I couldn't check it.

Summary

The dependency refresh updates shared packages through the workspace catalog and synchronizes the corresponding lockfile resolutions. The latest revisions also align SQLite typings and the Svelte formatter with the installed dependencies.

Sources consulted

• https://redirect.github.com/helm/helm/releases/tag/v4.0.0
• https://redirect.github.com/sveltejs/prettier-plugin-svelte/releases/tag/v4.0.0
• https://redirect.github.com/sveltejs/prettier-plugin-svelte/blob/HEAD/CHANGELOG.md

Commands offered: curl, fd, gh, jq, rg, yq; run: gh.
1 diff file(s) left out of the prompt to fit its budget: pnpm-lock.yaml.

_{Reviews (2) · Last reviewed commit: "chore(deps): update typescript-projects" · kritika with openai/gpt-6.1-sol}