@depup/nestjs__common 11.1.28-depup.0 → 11.2.0-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/nestjs__common
 
 | Field | Value |
 |-------|-------|
-| Original | [@nestjs/common](https://www.npmjs.com/package/@nestjs/common) @ 11.1.28 |
-| Processed | 2026-07-21 |
+| Original | [@nestjs/common](https://www.npmjs.com/package/@nestjs/common) @ 11.2.0 |
+| Processed | 2026-08-14 |
 | Smoke test | passed |
 | Deps updated | 1 |
 

package/changes.json

@@ -5,6 +5,6 @@
       "to": "^22.0.1"
     }
   },
-  "timestamp": "2026-07-21T17:10:17.891Z",
+  "timestamp": "2026-08-14T16:18:22.898Z",
   "totalUpdated": 1
 }

package/decorators/http/index.d.ts

@@ -6,3 +6,4 @@ export * from './render.decorator';
 export * from './header.decorator';
 export * from './redirect.decorator';
 export * from './sse.decorator';
+export * from './sse-signal.decorator';

package/decorators/http/index.js

@@ -9,3 +9,4 @@ tslib_1.__exportStar(require("./render.decorator"), exports);
 tslib_1.__exportStar(require("./header.decorator"), exports);
 tslib_1.__exportStar(require("./redirect.decorator"), exports);
 tslib_1.__exportStar(require("./sse.decorator"), exports);
+tslib_1.__exportStar(require("./sse-signal.decorator"), exports);

package/decorators/http/request-mapping.decorator.d.ts

@@ -76,6 +76,17 @@ export declare const All: (path?: string | string[]) => MethodDecorator;
  * @publicApi
  */
 export declare const Search: (path?: string | string[]) => MethodDecorator;
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+export declare const QueryMethod: (path?: string | string[]) => MethodDecorator;
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/request-mapping.decorator.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Unlock = exports.Lock = exports.Move = exports.Copy = exports.Mkcol = exports.Proppatch = exports.Propfind = exports.Search = exports.All = exports.Head = exports.Options = exports.Patch = exports.Put = exports.Delete = exports.Get = exports.Post = exports.RequestMapping = void 0;
+exports.Unlock = exports.Lock = exports.Move = exports.Copy = exports.Mkcol = exports.Proppatch = exports.Propfind = exports.QueryMethod = exports.Search = exports.All = exports.Head = exports.Options = exports.Patch = exports.Put = exports.Delete = exports.Get = exports.Post = exports.RequestMapping = void 0;
 const constants_1 = require("../../constants");
 const request_method_enum_1 = require("../../enums/request-method.enum");
 const defaultMetadata = {
@@ -96,6 +96,17 @@ exports.All = createMappingDecorator(request_method_enum_1.RequestMethod.ALL);
  * @publicApi
  */
 exports.Search = createMappingDecorator(request_method_enum_1.RequestMethod.SEARCH);
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+exports.QueryMethod = createMappingDecorator(request_method_enum_1.RequestMethod.QUERY);
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/sse-signal.decorator.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+export declare const SSE_ABORT_CONTROLLER: unique symbol;
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+export declare const SseSignal: () => ParameterDecorator;

package/decorators/http/sse-signal.decorator.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SseSignal = exports.SSE_ABORT_CONTROLLER = void 0;
+const create_route_param_metadata_decorator_1 = require("./create-route-param-metadata.decorator");
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+exports.SSE_ABORT_CONTROLLER = Symbol('SSE_ABORT_CONTROLLER');
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+exports.SseSignal = (0, create_route_param_metadata_decorator_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const controller = request?.[exports.SSE_ABORT_CONTROLLER];
+    return controller?.signal;
+});

package/enums/request-method.enum.d.ts

@@ -14,5 +14,6 @@ export declare enum RequestMethod {
     COPY = 12,
     MOVE = 13,
     LOCK = 14,
-    UNLOCK = 15
+    UNLOCK = 15,
+    QUERY = 16
 }

package/enums/request-method.enum.js

@@ -19,4 +19,5 @@ var RequestMethod;
     RequestMethod[RequestMethod["MOVE"] = 13] = "MOVE";
     RequestMethod[RequestMethod["LOCK"] = 14] = "LOCK";
     RequestMethod[RequestMethod["UNLOCK"] = 15] = "UNLOCK";
+    RequestMethod[RequestMethod["QUERY"] = 16] = "QUERY";
 })(RequestMethod || (exports.RequestMethod = RequestMethod = {}));

package/exceptions/misdirected.exception.d.ts

@@ -20,7 +20,7 @@ export declare class MisdirectedException extends HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 421.
-     * - `message`: the string `'Bad Gateway'` by default; override this by supplying
+     * - `message`: the string `'Misdirected'` by default; override this by supplying
      * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an

package/exceptions/misdirected.exception.js

@@ -24,7 +24,7 @@ class MisdirectedException extends http_exception_1.HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 421.
-     * - `message`: the string `'Bad Gateway'` by default; override this by supplying
+     * - `message`: the string `'Misdirected'` by default; override this by supplying
      * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an

package/exceptions/not-acceptable.exception.d.ts

@@ -20,8 +20,8 @@ export declare class NotAcceptableException extends HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 406.
-     * - `error`: the string `'Not Acceptable'` by default; override this by supplying
-     * a string in the `error` parameter.
+     * - `message`: the string `'Not Acceptable'` by default; override this by supplying
+     * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an
      * additional property, `error`, with a short description of the HTTP error. To override the

package/exceptions/not-acceptable.exception.js

@@ -24,8 +24,8 @@ class NotAcceptableException extends http_exception_1.HttpException {
      *
      * By default, the JSON response body contains two properties:
      * - `statusCode`: this will be the value 406.
-     * - `error`: the string `'Not Acceptable'` by default; override this by supplying
-     * a string in the `error` parameter.
+     * - `message`: the string `'Not Acceptable'` by default; override this by supplying
+     * a string in the `objectOrError` parameter.
      *
      * If the parameter `objectOrError` is a string, the response body will contain an
      * additional property, `error`, with a short description of the HTTP error. To override the

package/interfaces/http/http-server.interface.d.ts

@@ -39,6 +39,8 @@ export interface HttpServer<TRequest = any, TResponse = any, ServerInstance = an
     options(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     search?(handler: RequestHandler<TRequest, TResponse>): any;
     search?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
+    query?(handler: RequestHandler<TRequest, TResponse>): any;
+    query?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     listen(port: number | string, callback?: () => void): any;
     listen(port: number | string, hostname: string, callback?: () => void): any;
     reply(response: any, body: any, statusCode?: number): any;

package/interfaces/http/message-event.interface.d.ts

@@ -1,6 +1,7 @@
 export interface MessageEvent {
-    data: string | object;
+    data?: string | object;
     id?: string;
     type?: string;
     retry?: number;
+    comment?: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/nestjs__common",
-  "version": "11.1.28-depup.0",
+  "version": "11.2.0-depup.0",
   "description": "Nest - modern, fast, powerful node.js web framework (@common) (with updated dependencies)",
   "author": "Kamil Mysliwiec",
   "homepage": "https://nestjs.com",
@@ -35,7 +35,7 @@
       "optional": true
     }
   },
-  "gitHead": "dfaa376170168d12d9d28bcfe137a9bacce579a3",
+  "gitHead": "f2a7e4b1f57193cbbfe34e988276fc0eaf0b6eb5",
   "keywords": [
     "@nestjs/common",
     "depup",
@@ -53,8 +53,8 @@
     },
     "depsUpdated": 1,
     "originalPackage": "@nestjs/common",
-    "originalVersion": "11.1.28",
-    "processedAt": "2026-07-21T17:10:22.482Z",
+    "originalVersion": "11.2.0",
+    "processedAt": "2026-08-14T16:18:27.909Z",
     "smokeTest": "passed"
   }
 }

package/pipes/file/file-type.validator.d.ts

@@ -45,6 +45,13 @@ export type FileTypeValidatorOptions = {
      * @default false
      */
     fallbackToMimetype?: boolean;
+    /**
+     * If `true`, replaces the client-provided mimetype with the mimetype
+     * detected from the file content using magic number validation.
+     *
+     * @default false
+     */
+    overrideMimeType?: boolean;
 };
 /**
  * Defines the built-in FileTypeValidator. It validates incoming files by examining
@@ -58,5 +65,6 @@ export type FileTypeValidatorOptions = {
 export declare class FileTypeValidator extends FileValidator<FileTypeValidatorOptions, IFile> {
     buildErrorMessage(file?: IFile): string;
     isValid(file?: IFile): Promise<boolean>;
+    private matchesFileType;
 }
 export {};

package/pipes/file/file-type.validator.js

@@ -58,13 +58,13 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
         const isFileValid = !!file && 'mimetype' in file;
         // Skip magic number validation if set
         if (this.validationOptions.skipMagicNumbersValidation) {
-            return (isFileValid && !!file.mimetype.match(this.validationOptions.fileType));
+            return isFileValid && this.matchesFileType(file.mimetype);
         }
         if (!isFileValid)
             return false;
         if (!file.buffer) {
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -80,8 +80,11 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
             const { fileTypeFromBuffer } = await (0, load_esm_1.loadEsm)(fileTypeModule);
             const fileType = await fileTypeFromBuffer(file.buffer);
             if (fileType) {
+                if (this.validationOptions.overrideMimeType) {
+                    file.mimetype = fileType.mime;
+                }
                 // Match detected mime type against allowed type
-                return !!fileType.mime.match(this.validationOptions.fileType);
+                return this.matchesFileType(fileType.mime);
             }
             /**
              * Fallback logic: If file-type cannot detect magic number (e.g. file too small),
@@ -89,7 +92,7 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
              * This is useful for plain text, CSVs, or files without recognizable signatures.
              */
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -105,10 +108,19 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
             }
             // Fallback to mimetype if enabled
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
     }
+    matchesFileType(mimetype) {
+        const { fileType } = this.validationOptions;
+        // A string is coerced into a RegExp by `String#match`, so MIME types holding
+        // regex metacharacters (the `+` in `image/svg+xml`) never match themselves.
+        if (typeof fileType === 'string' && mimetype === fileType) {
+            return true;
+        }
+        return !!mimetype.match(fileType);
+    }
 }
 exports.FileTypeValidator = FileTypeValidator;

package/pipes/parse-array.pipe.d.ts

@@ -4,7 +4,7 @@ import { ValidationPipe, ValidationPipeOptions } from './validation.pipe';
 /**
  * @publicApi
  */
-export interface ParseArrayOptions extends Omit<ValidationPipeOptions, 'transform' | 'validateCustomDecorators' | 'exceptionFactory'> {
+export interface ParseArrayPipeOptions extends Omit<ValidationPipeOptions, 'transform' | 'validateCustomDecorators' | 'exceptionFactory'> {
     /**
      * Type for items to be converted into
      */
@@ -27,6 +27,8 @@ export interface ParseArrayOptions extends Omit<ValidationPipeOptions, 'transfor
      */
     exceptionFactory?: (error: any) => any;
 }
+/** @deprecated Use `ParseArrayPipeOptions` instead. */
+export type ParseArrayOptions = ParseArrayPipeOptions;
 /**
  * Defines the built-in ParseArray Pipe
  *
@@ -35,10 +37,10 @@ export interface ParseArrayOptions extends Omit<ValidationPipeOptions, 'transfor
  * @publicApi
  */
 export declare class ParseArrayPipe implements PipeTransform {
-    protected readonly options: ParseArrayOptions;
+    protected readonly options: ParseArrayPipeOptions;
     protected readonly validationPipe: ValidationPipe;
     protected exceptionFactory: (error: string) => any;
-    constructor(options?: ParseArrayOptions);
+    constructor(options?: ParseArrayPipeOptions);
     /**
      * Method that accesses and performs optional transformation on argument for
      * in-flight requests.

package/pipes/parse-date.pipe.d.ts

@@ -1,5 +1,8 @@
 import { PipeTransform } from '../interfaces/features/pipe-transform.interface';
 import { ErrorHttpStatusCode } from '../utils/http-error-by-code.util';
+/**
+ * @publicApi
+ */
 export interface ParseDatePipeOptions {
     /**
      * If true, the pipe will return null or undefined if the value is not provided
@@ -22,6 +25,9 @@ export interface ParseDatePipeOptions {
      */
     exceptionFactory?: (error: string) => any;
 }
+/**
+ * @publicApi
+ */
 export declare class ParseDatePipe implements PipeTransform<string | number | undefined | null> {
     private readonly options;
     protected exceptionFactory: (error: string) => any;

package/pipes/parse-date.pipe.js

@@ -6,6 +6,9 @@ const injectable_decorator_1 = require("../decorators/core/injectable.decorator"
 const http_status_enum_1 = require("../enums/http-status.enum");
 const http_error_by_code_util_1 = require("../utils/http-error-by-code.util");
 const shared_utils_1 = require("../utils/shared.utils");
+/**
+ * @publicApi
+ */
 let ParseDatePipe = class ParseDatePipe {
     constructor(options = {}) {
         this.options = options;

package/pipes/parse-enum.pipe.js

@@ -43,7 +43,13 @@ let ParseEnumPipe = class ParseEnumPipe {
         return value;
     }
     isEnum(value) {
-        const enumValues = Object.keys(this.enumType).map(item => this.enumType[item]);
+        const enumValues = Object.keys(this.enumType)
+            .filter(key => {
+            const enumValue = this.enumType[key];
+            return !(typeof enumValue === 'string' &&
+                typeof this.enumType[enumValue] === 'number');
+        })
+            .map(key => this.enumType[key]);
         return enumValues.includes(value);
     }
 };

package/pipes/validation.pipe.js

@@ -25,7 +25,7 @@ const BUILT_IN_TYPES = [Date, RegExp, Error, Map, Set, WeakMap, WeakSet];
 let ValidationPipe = class ValidationPipe {
     constructor(options) {
         options = options || {};
-        const { transform, disableErrorMessages, errorHttpStatusCode, expectedType, transformOptions, validateCustomDecorators, ...validatorOptions } = options;
+        const { transform, disableErrorMessages, errorHttpStatusCode, expectedType, transformOptions, exceptionFactory, validatorPackage, transformerPackage, validateCustomDecorators, ...validatorOptions } = options;
         // @see [https://github.com/nestjs/nest/issues/10683#issuecomment-1413690508](https://github.com/nestjs/nest/issues/10683#issuecomment-1413690508)
         this.validatorOptions = { forbidUnknownValues: false, ...validatorOptions };
         this.isTransformEnabled = !!transform;
@@ -34,10 +34,9 @@ let ValidationPipe = class ValidationPipe {
         this.validateCustomDecorators = validateCustomDecorators || false;
         this.errorHttpStatusCode = errorHttpStatusCode || http_status_enum_1.HttpStatus.BAD_REQUEST;
         this.expectedType = expectedType;
-        this.exceptionFactory =
-            options.exceptionFactory || this.createExceptionFactory();
-        classValidator = this.loadValidator(options.validatorPackage);
-        classTransformer = this.loadTransformer(options.transformerPackage);
+        this.exceptionFactory = exceptionFactory || this.createExceptionFactory();
+        classValidator = this.loadValidator(validatorPackage);
+        classTransformer = this.loadTransformer(transformerPackage);
     }
     loadValidator(validatorPackage) {
         return (validatorPackage ??