@depup/nestjs__common 11.1.29-depup.0 → 11.2.0-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/nestjs__common
 
 | Field | Value |
 |-------|-------|
-| Original | [@nestjs/common](https://www.npmjs.com/package/@nestjs/common) @ 11.1.29 |
-| Processed | 2026-08-10 |
+| Original | [@nestjs/common](https://www.npmjs.com/package/@nestjs/common) @ 11.2.0 |
+| Processed | 2026-08-14 |
 | Smoke test | passed |
 | Deps updated | 1 |
 

package/changes.json

@@ -5,6 +5,6 @@
       "to": "^22.0.1"
     }
   },
-  "timestamp": "2026-08-10T16:18:25.781Z",
+  "timestamp": "2026-08-14T16:18:22.898Z",
   "totalUpdated": 1
 }

package/decorators/http/index.d.ts

@@ -6,3 +6,4 @@ export * from './render.decorator';
 export * from './header.decorator';
 export * from './redirect.decorator';
 export * from './sse.decorator';
+export * from './sse-signal.decorator';

package/decorators/http/index.js

@@ -9,3 +9,4 @@ tslib_1.__exportStar(require("./render.decorator"), exports);
 tslib_1.__exportStar(require("./header.decorator"), exports);
 tslib_1.__exportStar(require("./redirect.decorator"), exports);
 tslib_1.__exportStar(require("./sse.decorator"), exports);
+tslib_1.__exportStar(require("./sse-signal.decorator"), exports);

package/decorators/http/request-mapping.decorator.d.ts

@@ -76,6 +76,17 @@ export declare const All: (path?: string | string[]) => MethodDecorator;
  * @publicApi
  */
 export declare const Search: (path?: string | string[]) => MethodDecorator;
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+export declare const QueryMethod: (path?: string | string[]) => MethodDecorator;
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/request-mapping.decorator.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Unlock = exports.Lock = exports.Move = exports.Copy = exports.Mkcol = exports.Proppatch = exports.Propfind = exports.Search = exports.All = exports.Head = exports.Options = exports.Patch = exports.Put = exports.Delete = exports.Get = exports.Post = exports.RequestMapping = void 0;
+exports.Unlock = exports.Lock = exports.Move = exports.Copy = exports.Mkcol = exports.Proppatch = exports.Propfind = exports.QueryMethod = exports.Search = exports.All = exports.Head = exports.Options = exports.Patch = exports.Put = exports.Delete = exports.Get = exports.Post = exports.RequestMapping = void 0;
 const constants_1 = require("../../constants");
 const request_method_enum_1 = require("../../enums/request-method.enum");
 const defaultMetadata = {
@@ -96,6 +96,17 @@ exports.All = createMappingDecorator(request_method_enum_1.RequestMethod.ALL);
  * @publicApi
  */
 exports.Search = createMappingDecorator(request_method_enum_1.RequestMethod.SEARCH);
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+exports.QueryMethod = createMappingDecorator(request_method_enum_1.RequestMethod.QUERY);
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/sse-signal.decorator.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+export declare const SSE_ABORT_CONTROLLER: unique symbol;
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+export declare const SseSignal: () => ParameterDecorator;

package/decorators/http/sse-signal.decorator.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SseSignal = exports.SSE_ABORT_CONTROLLER = void 0;
+const create_route_param_metadata_decorator_1 = require("./create-route-param-metadata.decorator");
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+exports.SSE_ABORT_CONTROLLER = Symbol('SSE_ABORT_CONTROLLER');
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+exports.SseSignal = (0, create_route_param_metadata_decorator_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const controller = request?.[exports.SSE_ABORT_CONTROLLER];
+    return controller?.signal;
+});

package/enums/request-method.enum.d.ts

@@ -14,5 +14,6 @@ export declare enum RequestMethod {
     COPY = 12,
     MOVE = 13,
     LOCK = 14,
-    UNLOCK = 15
+    UNLOCK = 15,
+    QUERY = 16
 }

package/enums/request-method.enum.js

@@ -19,4 +19,5 @@ var RequestMethod;
     RequestMethod[RequestMethod["MOVE"] = 13] = "MOVE";
     RequestMethod[RequestMethod["LOCK"] = 14] = "LOCK";
     RequestMethod[RequestMethod["UNLOCK"] = 15] = "UNLOCK";
+    RequestMethod[RequestMethod["QUERY"] = 16] = "QUERY";
 })(RequestMethod || (exports.RequestMethod = RequestMethod = {}));

package/interfaces/http/http-server.interface.d.ts

@@ -39,6 +39,8 @@ export interface HttpServer<TRequest = any, TResponse = any, ServerInstance = an
     options(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     search?(handler: RequestHandler<TRequest, TResponse>): any;
     search?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
+    query?(handler: RequestHandler<TRequest, TResponse>): any;
+    query?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     listen(port: number | string, callback?: () => void): any;
     listen(port: number | string, hostname: string, callback?: () => void): any;
     reply(response: any, body: any, statusCode?: number): any;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/nestjs__common",
-  "version": "11.1.29-depup.0",
+  "version": "11.2.0-depup.0",
   "description": "Nest - modern, fast, powerful node.js web framework (@common) (with updated dependencies)",
   "author": "Kamil Mysliwiec",
   "homepage": "https://nestjs.com",
@@ -35,7 +35,7 @@
       "optional": true
     }
   },
-  "gitHead": "03587a112ebbbb53a6bc3875afb5a9205aa5a5f1",
+  "gitHead": "f2a7e4b1f57193cbbfe34e988276fc0eaf0b6eb5",
   "keywords": [
     "@nestjs/common",
     "depup",
@@ -53,8 +53,8 @@
     },
     "depsUpdated": 1,
     "originalPackage": "@nestjs/common",
-    "originalVersion": "11.1.29",
-    "processedAt": "2026-08-10T16:18:30.286Z",
+    "originalVersion": "11.2.0",
+    "processedAt": "2026-08-14T16:18:27.909Z",
     "smokeTest": "passed"
   }
 }

package/pipes/file/file-type.validator.d.ts

@@ -65,5 +65,6 @@ export type FileTypeValidatorOptions = {
 export declare class FileTypeValidator extends FileValidator<FileTypeValidatorOptions, IFile> {
     buildErrorMessage(file?: IFile): string;
     isValid(file?: IFile): Promise<boolean>;
+    private matchesFileType;
 }
 export {};

package/pipes/file/file-type.validator.js

@@ -58,13 +58,13 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
         const isFileValid = !!file && 'mimetype' in file;
         // Skip magic number validation if set
         if (this.validationOptions.skipMagicNumbersValidation) {
-            return (isFileValid && !!file.mimetype.match(this.validationOptions.fileType));
+            return isFileValid && this.matchesFileType(file.mimetype);
         }
         if (!isFileValid)
             return false;
         if (!file.buffer) {
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -84,7 +84,7 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
                     file.mimetype = fileType.mime;
                 }
                 // Match detected mime type against allowed type
-                return !!fileType.mime.match(this.validationOptions.fileType);
+                return this.matchesFileType(fileType.mime);
             }
             /**
              * Fallback logic: If file-type cannot detect magic number (e.g. file too small),
@@ -92,7 +92,7 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
              * This is useful for plain text, CSVs, or files without recognizable signatures.
              */
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -108,10 +108,19 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
             }
             // Fallback to mimetype if enabled
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
     }
+    matchesFileType(mimetype) {
+        const { fileType } = this.validationOptions;
+        // A string is coerced into a RegExp by `String#match`, so MIME types holding
+        // regex metacharacters (the `+` in `image/svg+xml`) never match themselves.
+        if (typeof fileType === 'string' && mimetype === fileType) {
+            return true;
+        }
+        return !!mimetype.match(fileType);
+    }
 }
 exports.FileTypeValidator = FileTypeValidator;

package/pipes/parse-enum.pipe.js

@@ -43,7 +43,13 @@ let ParseEnumPipe = class ParseEnumPipe {
         return value;
     }
     isEnum(value) {
-        const enumValues = Object.keys(this.enumType).map(item => this.enumType[item]);
+        const enumValues = Object.keys(this.enumType)
+            .filter(key => {
+            const enumValue = this.enumType[key];
+            return !(typeof enumValue === 'string' &&
+                typeof this.enumType[enumValue] === 'number');
+        })
+            .map(key => this.enumType[key]);
         return enumValues.includes(value);
     }
 };