NestJS @nestjs/common version 10.4.12 introduces subtle but important changes compared to its predecessor, version 10.4.11. Primarily, developers will notice an upgrade in the tslib dependency, moving from version 2.7.0 to 2.8.1. This TypeScript helper library update often brings performance improvements and bug fixes related to TypeScript compilation, potentially leading to more efficient and reliable NestJS applications.
Furthermore, the new version sees an increase in the fileCount within the distributed package, rising from 393 to 397, and a corresponding increase in unpackedSize from 430126 to 434073. Although these differences seem marginal, they suggest added features, refinements, or documentation updates. Developers should investigate the changelog or release notes.
Released on November 29, 2024, version 10.4.12 arrives just two days after 10.4.11 (released November 27, 2024), indicating potentially a fix or quick update in response to feedback or issues identified in the earlier release.
Both versions maintain identical peer dependencies, requiring rxjs (version ^7.1.0), class-validator, reflect-metadata (version ^0.1.12 || ^0.2.0), and class-transformer. This indicates API compatibility between the two versions. NestJS developers should benefit from incrementatl improvements and will not impact existing NestJS software.
All the vulnerabilities related to the version 10.4.12 of the package
nest allows a remote attacker to execute arbitrary code via the Content-Type header
File Upload vulnerability in nestjs nest prior to v.11.0.16 allows a remote attacker to execute arbitrary code via the Content-Type header.
