v11.2.8

What's changed

• @nestjs/common
  • fix(common): reject non-numeric items in ParseArrayPipe with items Number — backport of #17876
  • fix(common): reject arrays nested in ParseArrayPipe items — backport of #18073
  • fix(common): skip array holes when stripping prototype keys
  • fix(common): copy array and object defaults in DefaultValuePipe
  • fix(common): cut json log records short past a million characters
  • fix(common): strip a falsy constructor key from request data
  • fix(common): validate parsed array items one at a time
  • fix(common): stop copying nested validation errors for each level
  • fix(common): reject arrays and primitives for validated classes
  • fix(common): limit the length of validation error messages by default
  • fix(common): stop exposing the validated object on validation errors
  • fix(common): match a file type string up to the end of a name
  • fix(common): handle StreamableFile errors raised before the reply
  • fix(common): keep StreamableFile error messages out of responses
  • fix(common): abort the response when a streamable file fails midway — backport of #18220
• @nestjs/core
  • fix(core,express,fastify): match excluded routes like the router does
  • fix(core): match excluded routes exactly when the router is unknown
  • fix(core): answer host mismatches on fastify with 404
  • fix(core): never exclude request targets with "#" or in absolute form
  • fix(core): mount unversioned middleware paths under the default version
  • fix(core): map controller middleware under every module declaring it
  • fix(core): mount transient-scoped middleware instead of skipping it — on v11 this also mounts the middleware listed after a transient one, which was skipped as well
  • fix(core): drop an overlapped middleware route only when it is covered
  • fix(core): mount wildcard middleware on every path when "/" is excluded
  • fix(core): mount middleware paths on routes excluded from the prefix
  • fix(core): stop wildcard exclusions from covering their parent route
  • fix(core): run middleware on a controller root excluded by a wildcard
  • fix(core,common): exclude a version only for requests that ask for it
  • fix(core,microservices,websockets): ignore inherited keys of non-objects
  • fix(core): stop the Observable producer when the client disconnects — backport of #17826
  • fix(core): end sse responses to head requests once headers are sent
  • fix(core): do not send the message of an unexposed http error
  • fix(core): destroy a StreamableFile dropped by a timed-out handler
  • fix(core): destroy a StreamableFile that is not sent
  • fix(core,express,fastify): remove uploads of requests a pipe rejected
  • fix(core): hand sse header errors to the exception filters
  • fix(core): drop sse clients that stop reading their events
  • fix(core): hide internal error messages from sse error events
  • fix(core): make the sse pending data limit configurable
  • fix(core): apply the expose flag of http errors to sse error events
  • fix(core,microservices): run transient global enhancers on controllers — backport of #17993
  • fix(core): stop silently dropping request-scoped global enhancers — backport of #18066; a global enhancer whose dependency tree is request-scoped is no longer silently skipped
  • fix(core): fail at startup for request-scoped class global enhancers — backport of #18104; such an enhancer (e.g. APP_GUARD with useClass) now fails at startup instead of running without its dependencies
  • fix(core): read class-level enhancers from the registered class
  • fix(core): apply the enhancers of class providers under any token
  • fix(core): run enhancers that are request-scoped through dependencies
  • fix(core): fail at startup when a global enhancer is not instantiated
  • fix(core): run transient global enhancers on static entry providers
  • fix(core,websockets): run transient enhancers bound to static gateways
  • fix(core): run guards bound as classes without a name
  • fix(core): subscribe to guard observables from other copies of rxjs
  • fix(core): run interceptor, pipe and filter classes without a name
• @nestjs/platform-express
  • fix(express): run wildcard middleware on "/api/" for a named wildcard
  • fix(express): apply middleware to controller root routes in strict mode
  • fix(express): map multer array index and invalid field name codes to 400 — backport of #17857
  • fix(express): destroy the StreamableFile source on client disconnect — backport of #17973
  • fix(express): send object error bodies with a json content type
  • fix(express,fastify): handle a StreamableFile that cannot be streamed
  • fix(express): stop reading a streamable file for a head request
• @nestjs/platform-fastify
  • fix(fastify): treat an empty route parameter as a route miss
  • fix(fastify): answer request targets that are not a path with 404
  • fix(fastify): pass middleware rejections to the error handler
  • fix(fastify): pass version extractor errors to the error handler
  • fix(fastify): match middleware paths like a case-insensitive router
  • fix(fastify): apply middleware to plugins registered before init
  • fix(fastify): run cors before nest middleware — backport of #18217
  • fix(fastify): stop reading a streamable file for a head request
• @nestjs/microservices
  • fix(microservices): close tls connections still in their handshake
  • fix(microservices): keep sibling event handlers running on error
  • fix(microservices): reject tcp data too long to be a content length
  • fix(microservices): keep reading tcp replies during client backpressure — backport of #18162
  • fix(microservices): drop tcp peers that stop reading their responses
  • fix(microservices): reply to a request only from its message handler
  • fix(microservices): stop tcp observable responses when the peer leaves
  • fix(microservices): route message handler rejections to handleError — backport of #17785
  • fix(microservices): reject mqtt topics longer than 65535 bytes
  • fix(microservices): use unguessable request ids and nats reply inboxes
  • fix(microservices): drop rmq replies that amqp cannot address
  • fix(microservices): only emit rmq replies that a request waits for
  • fix(microservices): drain streamed replies in linear time
  • fix(microservices): limit the length of pattern keys
  • fix(microservices): validate request ids before echoing them
  • fix(microservices): route mqtt messages by the topic they arrived on
  • fix(microservices): send no kafka headers given as a string or array
  • fix(microservices): decode kafka reply headers as text
  • fix(microservices): limit the size of kafka messages the parser decodes
  • fix(microservices): limit the number of kafka header values
  • fix(microservices): let only the exact message handler answer a request — backport of #18229
  • fix(microservices): honor mqtt topic filter boundaries — backport of #18221
  • fix(microservices): treat an error in an rpc exception as unknown
  • fix(microservices): answer grpc calls that error or complete empty
  • fix(microservices): error grpc duplex calls on upstream error
  • fix(microservices): send grpc errors that grpc-js can encode
  • fix(microservices): fail grpc response streams that emit null
  • fix(microservices): fail grpc calls whose handler promise rejects
  • fix(microservices): end grpc unary subscriptions with the call
  • fix(microservices): pause grpc request streams while replies wait
• @nestjs/websockets
  • fix(websockets): log and reply when the error cause cannot be sent
  • fix(websockets): bound how many messages of a client are handled at once
  • fix(websockets): treat an error in a ws exception as unknown
• @nestjs/platform-ws
  • fix(ws): drop messages from a client the server is closing
  • fix(ws): close the socket of an upgrade request it cannot parse
  • fix(ws): answer non-upgrade requests on a gateway's own port with 426
  • fix(ws): listen on the host of a gateway with its own port and a path
  • fix(ws): stop reading from a client that does not read its replies

Full Changelog: v11.2.7...v11.2.8