Skip to content

Commit 5637aa0

Browse files
chargomeclaude
chargome
and
claude
authored
chore(deps): Bump @nestjs packages to fix path-to-regexp ReDoS (#20642)
## Summary - Bumps `@nestjs/core` and `@nestjs/platform-express` from 11.1.6 → 11.1.19 in integration tests - Updates `path-to-regexp` from 8.2.0/8.3.0 → 8.4.2 (deduplicates all 8.x entries) - Fixes [Dependabot alert 1276](https://github.com/getsentry/sentry-javascript/security/dependabot/1276) (CVE-2026-4926, DoS via sequential optional groups) - Fixes [Dependabot alert 1277](https://github.com/getsentry/sentry-javascript/security/dependabot/1277) (CVE-2026-4923, ReDoS via multiple wildcards) 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>
1 parent 803d715 commit 5637aa0

1 file changed

Lines changed: 62 additions & 24 deletions

File tree

‎yarn.lock‎

Lines changed: 62 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -5436,6 +5436,17 @@
54365436
dependencies:
54375437
"@tybys/wasm-util" "^0.10.1"
54385438

5439+
"@nestjs/[email protected]", "@nestjs/common@^11":
5440+
version "11.1.19"
5441+
resolved "https://registry.yarnpkg.com/@nestjs/common/-/common-11.1.19.tgz#50ba93ae45ebaeda6163554b8e2ecec545a25c92"
5442+
integrity sha512-qeiTt2tv+e5QyDKqG8HlVZb2wx64FEaSGFJouqTSRs+kG44iTfl3xlz1XqVped+rihx4hmjWgL5gkhtdK3E6+Q==
5443+
dependencies:
5444+
uid "2.0.2"
5445+
file-type "21.3.4"
5446+
iterare "1.2.1"
5447+
load-esm "1.0.3"
5448+
tslib "2.8.1"
5449+
54395450
"@nestjs/common@^10.0.0":
54405451
version "10.4.15"
54415452
resolved "https://registry.yarnpkg.com/@nestjs/common/-/common-10.4.15.tgz#27c291466d9100eb86fdbe6f7bbb4d1a6ad55f70"
@@ -5445,15 +5456,16 @@
54455456
iterare "1.2.1"
54465457
tslib "2.8.1"
54475458

5448-
"@nestjs/common@^11":
5449-
version "11.1.17"
5450-
resolved "https://registry.npmjs.org/@nestjs/common/-/common-11.1.17.tgz"
5451-
integrity sha512-hLODw5Abp8OQgA+mUO4tHou4krKgDtUcM9j5Ihxncst9XeyxYBTt2bwZm4e4EQr5E352S4Fyy6V3iFx9ggxKAg==
5459+
"@nestjs/[email protected]":
5460+
version "11.1.19"
5461+
resolved "https://registry.yarnpkg.com/@nestjs/core/-/core-11.1.19.tgz#d724f1afc0caac29e005464f0f659425fc80235b"
5462+
integrity sha512-6nJkWa2efrYi+XlU686J9y5L7OvxpLVjT0T/sxRKE7Jvpffiihelup4WSvLvRhdHDjj/5SuoWEwqReXAaaeHmw==
54525463
dependencies:
54535464
uid "2.0.2"
5454-
file-type "21.3.2"
5465+
"@nuxt/opencollective" "0.4.1"
5466+
fast-safe-stringify "2.1.1"
54555467
iterare "1.2.1"
5456-
load-esm "1.0.3"
5468+
path-to-regexp "8.4.2"
54575469
tslib "2.8.1"
54585470

54595471
"@nestjs/core@^10.0.0":
@@ -5469,26 +5481,37 @@
54695481
tslib "2.8.1"
54705482

54715483
"@nestjs/core@^11":
5472-
version "11.1.6"
5473-
resolved "https://registry.yarnpkg.com/@nestjs/core/-/core-11.1.6.tgz#9d54882f121168b2fa2b07fa1db0858161a80626"
5474-
integrity sha512-siWX7UDgErisW18VTeJA+x+/tpNZrJewjTBsRPF3JVxuWRuAB1kRoiJcxHgln8Lb5UY9NdvklITR84DUEXD0Cg==
5484+
version "11.1.19"
5485+
resolved "https://registry.yarnpkg.com/@nestjs/core/-/core-11.1.19.tgz#d724f1afc0caac29e005464f0f659425fc80235b"
5486+
integrity sha512-6nJkWa2efrYi+XlU686J9y5L7OvxpLVjT0T/sxRKE7Jvpffiihelup4WSvLvRhdHDjj/5SuoWEwqReXAaaeHmw==
54755487
dependencies:
54765488
uid "2.0.2"
54775489
"@nuxt/opencollective" "0.4.1"
54785490
fast-safe-stringify "2.1.1"
54795491
iterare "1.2.1"
5480-
path-to-regexp "8.2.0"
5492+
path-to-regexp "8.4.2"
5493+
tslib "2.8.1"
5494+
5495+
"@nestjs/[email protected]":
5496+
version "11.1.19"
5497+
resolved "https://registry.yarnpkg.com/@nestjs/platform-express/-/platform-express-11.1.19.tgz#e55f5078396b2285344f95f2b530b648e844cd4c"
5498+
integrity sha512-Vpdv8jyCQdThfoTx+UTn+DRYr6H6X02YUqcpZ3qP6G3ZUwtVp7eS+hoQPGd4UuCnlnFG8Wqr2J9bGEzQdi1rIg==
5499+
dependencies:
5500+
cors "2.8.6"
5501+
express "5.2.1"
5502+
multer "2.1.1"
5503+
path-to-regexp "8.4.2"
54815504
tslib "2.8.1"
54825505

54835506
"@nestjs/platform-express@^11":
5484-
version "11.1.13"
5485-
resolved "https://registry.yarnpkg.com/@nestjs/platform-express/-/platform-express-11.1.13.tgz#272e350cb3938ec0f383aa083c7f1d5d44fae2dc"
5486-
integrity sha512-LYmi43BrAs1n74kLCUfXcHag7s1CmGETcFbf9IVyA/KWXAuAH95G3wEaZZiyabOLFNwq4ifnRGnIwUwW7cz3+w==
5507+
version "11.1.19"
5508+
resolved "https://registry.yarnpkg.com/@nestjs/platform-express/-/platform-express-11.1.19.tgz#e55f5078396b2285344f95f2b530b648e844cd4c"
5509+
integrity sha512-Vpdv8jyCQdThfoTx+UTn+DRYr6H6X02YUqcpZ3qP6G3ZUwtVp7eS+hoQPGd4UuCnlnFG8Wqr2J9bGEzQdi1rIg==
54875510
dependencies:
54885511
cors "2.8.6"
54895512
express "5.2.1"
5490-
multer "2.0.2"
5491-
path-to-regexp "8.3.0"
5513+
multer "2.1.1"
5514+
path-to-regexp "8.4.2"
54925515
tslib "2.8.1"
54935516

54945517
"@next/[email protected]":
@@ -17428,6 +17451,16 @@ [email protected]:
1742817451
token-types "^6.1.1"
1742917452
uint8array-extras "^1.4.0"
1743017453

17454+
[email protected]:
17455+
version "21.3.4"
17456+
resolved "https://registry.yarnpkg.com/file-type/-/file-type-21.3.4.tgz#e3f902faee8ec4aa152909fc902a7a77f9c06725"
17457+
integrity sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==
17458+
dependencies:
17459+
"@tokenizer/inflate" "^0.4.1"
17460+
strtok3 "^10.3.4"
17461+
token-types "^6.1.1"
17462+
uint8array-extras "^1.4.0"
17463+
1743117464
[email protected]:
1743217465
version "1.0.0"
1743317466
resolved "https://registry.yarnpkg.com/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz#553a7b8446ff6f684359c445f1e37a05dacc33dd"
@@ -22543,6 +22576,16 @@ [email protected]:
2254322576
type-is "^1.6.18"
2254422577
xtend "^4.0.2"
2254522578

22579+
[email protected]:
22580+
version "2.1.1"
22581+
resolved "https://registry.yarnpkg.com/multer/-/multer-2.1.1.tgz#122d819244fbdfee1efddd9147426691014385b7"
22582+
integrity sha512-mo+QTzKlx8R7E5ylSXxWzGoXoZbOsRMpyitcht8By2KHvMbf3tjwosZ/Mu/XYU6UuJ3VZnODIrak5ZrPiPyB6A==
22583+
dependencies:
22584+
append-field "^1.0.0"
22585+
busboy "^1.6.0"
22586+
concat-stream "^2.0.0"
22587+
type-is "^1.6.18"
22588+
2254622589
multicast-dns@^7.2.5:
2254722590
version "7.2.5"
2254822591
resolved "https://registry.yarnpkg.com/multicast-dns/-/multicast-dns-7.2.5.tgz#77eb46057f4d7adbd16d9290fa7299f6fa64cced"
@@ -24336,15 +24379,10 @@ [email protected], path-to-regexp@^6.2.1:
2433624379
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-6.3.0.tgz#2b6a26a337737a8e1416f9272ed0766b1c0389f4"
2433724380
integrity sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==
2433824381

24339-
[email protected]:
24340-
version "8.2.0"
24341-
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-8.2.0.tgz#73990cc29e57a3ff2a0d914095156df5db79e8b4"
24342-
integrity sha512-TdrF7fW9Rphjq4RjrW0Kp2AW0Ahwu9sRGTkS6bvDi0SCwZlEZYmcfDbEsTz8RVk0EHIS/Vd1bv3JhG+1xZuAyQ==
24343-
24344-
[email protected], path-to-regexp@^8.0.0:
24345-
version "8.3.0"
24346-
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-8.3.0.tgz#aa818a6981f99321003a08987d3cec9c3474cd1f"
24347-
integrity sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA==
24382+
[email protected], path-to-regexp@^8.0.0:
24383+
version "8.4.2"
24384+
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-8.4.2.tgz#795c420c4f7ca45c5b887366f622ee0c9852cccd"
24385+
integrity sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==
2434824386

2434924387
path-to-regexp@^1.5.3, path-to-regexp@^1.7.0:
2435024388
version "1.9.0"

0 commit comments

Comments
 (0)