@depup/nestjs__common 11.1.29-depup.0 → 11.2.1-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/nestjs__common
 
 | Field | Value |
 |-------|-------|
-| Original | [@nestjs/common](https://www.npmjs.com/package/@nestjs/common) @ 11.1.29 |
-| Processed | 2026-08-10 |
+| Original | [@nestjs/common](https://www.npmjs.com/package/@nestjs/common) @ 11.2.1 |
+| Processed | 2026-08-15 |
 | Smoke test | passed |
 | Deps updated | 1 |
 

package/changes.json

@@ -5,6 +5,6 @@
       "to": "^22.0.1"
     }
   },
-  "timestamp": "2026-08-10T16:18:25.781Z",
+  "timestamp": "2026-08-15T00:16:29.469Z",
   "totalUpdated": 1
 }

package/decorators/http/index.d.ts

@@ -6,3 +6,4 @@ export * from './render.decorator';
 export * from './header.decorator';
 export * from './redirect.decorator';
 export * from './sse.decorator';
+export * from './sse-signal.decorator';

package/decorators/http/index.js

@@ -9,3 +9,4 @@ tslib_1.__exportStar(require("./render.decorator"), exports);
 tslib_1.__exportStar(require("./header.decorator"), exports);
 tslib_1.__exportStar(require("./redirect.decorator"), exports);
 tslib_1.__exportStar(require("./sse.decorator"), exports);
+tslib_1.__exportStar(require("./sse-signal.decorator"), exports);

package/decorators/http/request-mapping.decorator.d.ts

@@ -76,6 +76,17 @@ export declare const All: (path?: string | string[]) => MethodDecorator;
  * @publicApi
  */
 export declare const Search: (path?: string | string[]) => MethodDecorator;
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+export declare const QueryMethod: (path?: string | string[]) => MethodDecorator;
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/request-mapping.decorator.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Unlock = exports.Lock = exports.Move = exports.Copy = exports.Mkcol = exports.Proppatch = exports.Propfind = exports.Search = exports.All = exports.Head = exports.Options = exports.Patch = exports.Put = exports.Delete = exports.Get = exports.Post = exports.RequestMapping = void 0;
+exports.Unlock = exports.Lock = exports.Move = exports.Copy = exports.Mkcol = exports.Proppatch = exports.Propfind = exports.QueryMethod = exports.Search = exports.All = exports.Head = exports.Options = exports.Patch = exports.Put = exports.Delete = exports.Get = exports.Post = exports.RequestMapping = void 0;
 const constants_1 = require("../../constants");
 const request_method_enum_1 = require("../../enums/request-method.enum");
 const defaultMetadata = {
@@ -96,6 +96,17 @@ exports.All = createMappingDecorator(request_method_enum_1.RequestMethod.ALL);
  * @publicApi
  */
 exports.Search = createMappingDecorator(request_method_enum_1.RequestMethod.SEARCH);
+/**
+ * Route handler (method) Decorator. Routes HTTP QUERY requests to the specified path.
+ *
+ * **Note**: this is named `QueryMethod` (rather than `Query`) to avoid a name clash
+ * with the `@Query()` parameter decorator used to extract query-string params.
+ *
+ * @see [Routing](https://docs.nestjs.com/controllers#routing)
+ *
+ * @publicApi
+ */
+exports.QueryMethod = createMappingDecorator(request_method_enum_1.RequestMethod.QUERY);
 /**
  * Route handler (method) Decorator. Routes Webdav PROPFIND requests to the specified path.
  *

package/decorators/http/sse-signal.decorator.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+export declare const SSE_ABORT_CONTROLLER: unique symbol;
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+export declare const SseSignal: () => ParameterDecorator;

package/decorators/http/sse-signal.decorator.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SseSignal = exports.SSE_ABORT_CONTROLLER = void 0;
+const create_route_param_metadata_decorator_1 = require("./create-route-param-metadata.decorator");
+/**
+ * Symbol used to carry the per-request SSE `AbortController` on the request object.
+ *
+ * The controller is attached by the framework before the route handler runs and is
+ * aborted when the client disconnects. Its signal is exposed to route handlers
+ * through the `@SseSignal()` parameter decorator.
+ *
+ * @publicApi
+ */
+exports.SSE_ABORT_CONTROLLER = Symbol('SSE_ABORT_CONTROLLER');
+/**
+ * Route handler parameter decorator that injects the `AbortSignal` associated
+ * with a Server-Sent-Events (SSE) request.
+ *
+ * The signal represents the lifetime of the SSE response: it is aborted once the
+ * stream terminates, whether because the client disconnected, the `Observable`
+ * completed, or it errored. Tying setup-phase resources to the signal therefore
+ * releases them exactly once on every exit path, including resources allocated
+ * before the returned `Observable` exists — which would otherwise leak, since the
+ * producer is never subscribed once the client has disconnected.
+ *
+ * Because the signal also aborts on normal completion, `signal.aborted` is only
+ * meaningful as a "did the client go away?" check *during setup*, before the
+ * `Observable` is returned; at that point the stream cannot have completed yet.
+ * Cleanup wired to the `abort` event should be idempotent, as it may run
+ * alongside the `Observable`'s own teardown.
+ *
+ * @example
+ * ```ts
+ * @Sse('stream')
+ * async stream(@SseSignal() signal: AbortSignal): Promise<Observable<MessageEvent>> {
+ *   const session = await createSession();
+ *   if (signal.aborted) {
+ *     await session.close();
+ *     return EMPTY;
+ *   }
+ *   return new Observable(subscriber => {
+ *     const stream = startGeneration(session);
+ *     signal.addEventListener('abort', () => stream.stop(), { once: true });
+ *     return () => stream.stop();
+ *   });
+ * }
+ * ```
+ *
+ * @publicApi
+ */
+exports.SseSignal = (0, create_route_param_metadata_decorator_1.createParamDecorator)((_data, ctx) => {
+    const request = ctx.switchToHttp().getRequest();
+    const controller = request?.[exports.SSE_ABORT_CONTROLLER];
+    return controller?.signal;
+});

package/enums/request-method.enum.d.ts

@@ -14,5 +14,6 @@ export declare enum RequestMethod {
     COPY = 12,
     MOVE = 13,
     LOCK = 14,
-    UNLOCK = 15
+    UNLOCK = 15,
+    QUERY = 16
 }

package/enums/request-method.enum.js

@@ -19,4 +19,5 @@ var RequestMethod;
     RequestMethod[RequestMethod["MOVE"] = 13] = "MOVE";
     RequestMethod[RequestMethod["LOCK"] = 14] = "LOCK";
     RequestMethod[RequestMethod["UNLOCK"] = 15] = "UNLOCK";
+    RequestMethod[RequestMethod["QUERY"] = 16] = "QUERY";
 })(RequestMethod || (exports.RequestMethod = RequestMethod = {}));

package/interfaces/http/http-server.interface.d.ts

@@ -39,6 +39,8 @@ export interface HttpServer<TRequest = any, TResponse = any, ServerInstance = an
     options(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     search?(handler: RequestHandler<TRequest, TResponse>): any;
     search?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
+    query?(handler: RequestHandler<TRequest, TResponse>): any;
+    query?(path: string, handler: RequestHandler<TRequest, TResponse>): any;
     listen(port: number | string, callback?: () => void): any;
     listen(port: number | string, hostname: string, callback?: () => void): any;
     reply(response: any, body: any, statusCode?: number): any;

package/interfaces/microservices/transport-server.interface.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Interface describing the shape of a transport server.
+ * Used as the return type of `getTransportServer()` to provide
+ * autocomplete without creating circular dependencies.
+ *
+ * @publicApi
+ */
+export interface ITransportServer {
+    /**
+     * Starts the transport server.
+     * @param callback Function to be called upon initialization
+     */
+    listen(callback: (...optionalParams: unknown[]) => any): any;
+    /**
+     * Closes the transport server (stops listening on port/connection).
+     */
+    close(): any;
+}

package/interfaces/microservices/transport-server.interface.js

@@ -0,0 +1 @@
+export {};

package/internal.d.ts

@@ -8,6 +8,7 @@
 export * from './constants.js';
 export { RouteParamtypes } from './enums/route-paramtypes.enum.js';
 export * from './utils/shared.utils.js';
+export * from './utils/parameter-decorator-options.util.js';
 export * from './utils/load-package.util.js';
 export * from './utils/cli-colors.util.js';
 export * from './utils/random-string-generator.util.js';

package/internal.js

@@ -11,6 +11,7 @@ export * from './constants.js';
 export { RouteParamtypes } from './enums/route-paramtypes.enum.js';
 // Utils
 export * from './utils/shared.utils.js';
+export * from './utils/parameter-decorator-options.util.js';
 export * from './utils/load-package.util.js';
 export * from './utils/cli-colors.util.js';
 export * from './utils/random-string-generator.util.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/nestjs__common",
-  "version": "11.1.29-depup.0",
+  "version": "11.2.1-depup.0",
   "description": "Nest - modern, fast, powerful node.js web framework (@common) (with updated dependencies)",
   "author": "Kamil Mysliwiec",
   "homepage": "https://nestjs.com",
@@ -35,7 +35,7 @@
       "optional": true
     }
   },
-  "gitHead": "03587a112ebbbb53a6bc3875afb5a9205aa5a5f1",
+  "gitHead": "4535f43b4890c9c69c57c5a5a8b49f62c83d1ed6",
   "keywords": [
     "@nestjs/common",
     "depup",
@@ -53,8 +53,8 @@
     },
     "depsUpdated": 1,
     "originalPackage": "@nestjs/common",
-    "originalVersion": "11.1.29",
-    "processedAt": "2026-08-10T16:18:30.286Z",
+    "originalVersion": "11.2.1",
+    "processedAt": "2026-08-15T00:16:32.505Z",
     "smokeTest": "passed"
   }
 }

package/pipes/file/file-type.validator.d.ts

@@ -65,5 +65,6 @@ export type FileTypeValidatorOptions = {
 export declare class FileTypeValidator extends FileValidator<FileTypeValidatorOptions, IFile> {
     buildErrorMessage(file?: IFile): string;
     isValid(file?: IFile): Promise<boolean>;
+    private matchesFileType;
 }
 export {};

package/pipes/file/file-type.validator.js

@@ -58,13 +58,13 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
         const isFileValid = !!file && 'mimetype' in file;
         // Skip magic number validation if set
         if (this.validationOptions.skipMagicNumbersValidation) {
-            return (isFileValid && !!file.mimetype.match(this.validationOptions.fileType));
+            return isFileValid && this.matchesFileType(file.mimetype);
         }
         if (!isFileValid)
             return false;
         if (!file.buffer) {
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -84,7 +84,7 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
                     file.mimetype = fileType.mime;
                 }
                 // Match detected mime type against allowed type
-                return !!fileType.mime.match(this.validationOptions.fileType);
+                return this.matchesFileType(fileType.mime);
             }
             /**
              * Fallback logic: If file-type cannot detect magic number (e.g. file too small),
@@ -92,7 +92,7 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
              * This is useful for plain text, CSVs, or files without recognizable signatures.
              */
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
@@ -108,10 +108,19 @@ class FileTypeValidator extends file_validator_interface_1.FileValidator {
             }
             // Fallback to mimetype if enabled
             if (this.validationOptions.fallbackToMimetype) {
-                return !!file.mimetype.match(this.validationOptions.fileType);
+                return this.matchesFileType(file.mimetype);
             }
             return false;
         }
     }
+    matchesFileType(mimetype) {
+        const { fileType } = this.validationOptions;
+        // A string is coerced into a RegExp by `String#match`, so MIME types holding
+        // regex metacharacters (the `+` in `image/svg+xml`) never match themselves.
+        if (typeof fileType === 'string' && mimetype === fileType) {
+            return true;
+        }
+        return !!mimetype.match(fileType);
+    }
 }
 exports.FileTypeValidator = FileTypeValidator;

package/pipes/parse-enum.pipe.js

@@ -43,7 +43,13 @@ let ParseEnumPipe = class ParseEnumPipe {
         return value;
     }
     isEnum(value) {
-        const enumValues = Object.keys(this.enumType).map(item => this.enumType[item]);
+        const enumValues = Object.keys(this.enumType)
+            .filter(key => {
+            const enumValue = this.enumType[key];
+            return !(typeof enumValue === 'string' &&
+                typeof this.enumType[enumValue] === 'number');
+        })
+            .map(key => this.enumType[key]);
         return enumValues.includes(value);
     }
 };

package/pipes/standard-schema-validation.pipe.d.ts

@@ -53,6 +53,11 @@ export declare class StandardSchemaValidationPipe implements PipeTransform {
     protected validateOptions: Record<string, unknown> | undefined;
     protected exceptionFactory: (issues: readonly StandardSchemaV1.Issue[]) => any;
     constructor(options?: StandardSchemaValidationPipeOptions | undefined);
+    /**
+     * Formats Standard Schema validation issues into a flat list of error messages.
+     * When an issue includes a path, the path is prefixed to the message.
+     */
+    protected formatIssueMessages(issues: readonly StandardSchemaV1.Issue[]): string[];
     /**
      * Method that validates the incoming value against the standard schema
      * provided in the parameter metadata.

package/pipes/standard-schema-validation.pipe.js

@@ -34,10 +34,22 @@ let StandardSchemaValidationPipe = class StandardSchemaValidationPipe {
         this.exceptionFactory =
             exceptionFactory ||
                 (issues => {
-                    const messages = issues.map(issue => issue.message);
+                    const messages = this.formatIssueMessages(issues);
                     return new HttpErrorByCode[errorHttpStatusCode](messages);
                 });
     }
+    /**
+     * Formats Standard Schema validation issues into a flat list of error messages.
+     * When an issue includes a path, the path is prefixed to the message.
+     */
+    formatIssueMessages(issues) {
+        return issues.map(issue => {
+            if (issue.path?.length) {
+                return `${issue.path.map(String).join('.')}: ${issue.message}`;
+            }
+            return issue.message;
+        });
+    }
     /**
      * Method that validates the incoming value against the standard schema
      * provided in the parameter metadata.

package/serializer/standard-schema-serializer.interceptor.js

@@ -1,5 +1,5 @@
 import { __decorate, __metadata, __param } from "tslib";
-import { map } from 'rxjs/operators';
+import { concatMap } from 'rxjs/operators';
 import { Inject, Injectable, Optional } from '../decorators/core/index.js';
 import { StreamableFile } from '../file-stream/index.js';
 import { isObject } from '../utils/shared.utils.js';
@@ -36,7 +36,7 @@ let StandardSchemaSerializerInterceptor = class StandardSchemaSerializerIntercep
         const validateOptions = contextOptions?.validateOptions ?? this.defaultOptions.validateOptions;
         return next
             .handle()
-            .pipe(map((res) => this.serialize(res, schema, validateOptions)));
+            .pipe(concatMap(async (res) => this.serialize(res, schema, validateOptions)));
     }
     /**
      * Serializes responses that are non-null objects nor streamable files.

package/utils/parameter-decorator-options.util.d.ts

@@ -0,0 +1,13 @@
+import type { ParameterDecoratorOptions } from '../decorators/http/route-params.decorator.js';
+/**
+ * Determines whether a parameter-decorator argument is a
+ * `ParameterDecoratorOptions` object rather than a pipe (instance or class).
+ *
+ * Kept in one place so every decorator (`@Query`, `@Body`, `@Param`,
+ * `@RawBody`, `@Payload`, `@MessageBody`, custom decorators, ...) classifies
+ * arguments identically: a pipe instance that happens to expose a `schema` or
+ * `pipes` property must never be mistaken for an options object.
+ *
+ * @internal
+ */
+export declare function isParameterDecoratorOptions(value: unknown): value is ParameterDecoratorOptions;

package/utils/parameter-decorator-options.util.js

@@ -0,0 +1,22 @@
+import { isFunction } from './shared.utils.js';
+const isPipeLike = (value) => isFunction(value?.transform) ||
+    (isFunction(value) &&
+        value.prototype &&
+        isFunction(value.prototype.transform));
+/**
+ * Determines whether a parameter-decorator argument is a
+ * `ParameterDecoratorOptions` object rather than a pipe (instance or class).
+ *
+ * Kept in one place so every decorator (`@Query`, `@Body`, `@Param`,
+ * `@RawBody`, `@Payload`, `@MessageBody`, custom decorators, ...) classifies
+ * arguments identically: a pipe instance that happens to expose a `schema` or
+ * `pipes` property must never be mistaken for an options object.
+ *
+ * @internal
+ */
+export function isParameterDecoratorOptions(value) {
+    return (!!value &&
+        typeof value === 'object' &&
+        !isPipeLike(value) &&
+        ('schema' in value || 'pipes' in value));
+}