Nest is a progressive Node.js framework for building efficient, scalable server-side applications with TypeScript (while preserving compatibility with JavaScript). It provides an application architecture inspired by Angular, and it can run on top of Express while also supporting other libraries like Fastify for plugin compatibility.
Project status
- Actively maintained, with an upstream push today and multiple updates in recent weeks.
- Updates are frequent, often spaced days apart, and include both v12 and v11 maintenance.
AI summary generated
Recent updates
v12.4.0
v12.4.0 adds support for setting application-wide view locals in the Node adapter and for returning Web Responses or streams from handlers. It also fixes issues across routing, middleware, microservices, response headers, parsing, logging, and provider overrides.
Featuresv12.3.0
v12.3.0 adds the native Node HTTP platform adapter and includes fixes across common, core, HTTP adapters, and microservices. It also updates several dependencies, including a security-marked Multer update; the supplied diff shows additional cookie-related integration coverage and repository tooling changes not described in the release notes.
SecurityFeaturesv11.2.8
NestJS v11.2.8 is a broad bug-fix release across common, core, HTTP adapters, microservices, and WebSockets. It improves routing and middleware matching, streaming and Observable lifecycle handling, validation behavior, and error handling, with several changes also hardening resource use and error disclosure.
BreakingSecurityFeaturesv12.2.0
NestJS v12.2.0 introduces several new configurable limits and adapter options (including SSE buffering and WebSocket/Io adapters concurrency), along with notable default behavior changes around validation, routing/middleware matching, file uploads, and exception serialization. The release notes also document multiple microservices and Fastify behavior updates, plus a middleware exclusion matching behavior change that affects how excluded paths are compiled.
BreakingFeaturesv12.1.3
NestJS v12.1.3 is a patch release focused on bug fixes across core, Express, Fastify, microservices, websockets, and common utilities. It also includes one enhancement related to express/fastify file upload limits (field nesting depth and array index limits) plus minor dependency bumps for Fastify packages.
Featuresv12.1.1
v12.1.1 is primarily a bugfix release for NestJS logging behavior, especially in JSON logging output, log level handling, fatal logging, and buffered logs. It also includes a microservices package enhancement to re-export deserializers from the package root, plus a small validation improvement in ParseArrayPipe.
Featuresv11.2.6
Release v11.2.6 notes only describe a security dependency update (multer 2.2.0 to 2.4.0) and a backported fix to map multer errors by code instead of message. However, the code diff shows additional changes across microservices TCP transport behavior, core instrumentation (instanceDecorator safety), and related integration tests that are not mentioned in the release notes.
SecurityFeaturesv12.1.0
v12.1.0 focuses on bug fixes across core and microservices, plus several user-facing enhancements. Notably, it adds support for array-based global prefixes, built-in adapter-agnostic cookies, and built-in CSRF protection with security headers, along with a Fastify-focused file upload interceptor feature.
Featuresv12.0.4
v12.0.4 primarily includes microservices bug fixes around pending request handling on client close, improved retry behavior (Kafka), and more robust gRPC namespace handling. It also fixes a core hang related to sparse factory provider inject arrays, plus a small Express and Common improvement (multer limits merging, and ParseDatePipe options being optional).
v12.0.3
Release v12.0.3 contains a small set of documented bug fixes, mainly around microservices behavior (Kafka hooks and TCP socket shutdown/close handling) plus fixes in common utilities (UUID validation, and proto-key stripping hook invocation). It also documents dependency bumps for `multer` and `file-type`. The included code diff, however, shows additional large-scale, non-release-noted changes focused on repo tooling, CI configuration, and ESM-style test/import behavior.
v11.2.5
v11.2.5 includes a hardening change to the TCP transport intended to mitigate hostile peers (DoS style behavior). The release notes only mention this microservices TCP fix, but the diff also shows additional public TCP options, changes to error/backpressure behavior, and multiple cross-cutting core instrumentation changes.
BreakingSecurityFeaturesv11.2.4
v11.2.4 documents two fixes, microservices now avoid crashing when message patterns cannot be serialized, and the Fastify platform no longer bypasses middleware for absolute-form request targets. The code diff includes additional undocumented internal behavior changes around instrumented instance decorators, microservice error propagation, and Fastify middleware implementation switching.
v12.0.2
v12.0.2 is a patch release focused on bug fixes across core error handling, microservices request/reply behavior, and socket.io stream lifecycle. It also includes a microservices enhancement for MQTT connection retry behavior. The code diff shows additional runtime behavior changes and a broader set of dependency upgrades than the release notes call out.
Featuresv12.0.0
NestJS v12.0.0 focuses on ESM-ready core packages, Standard Schema support for validation and serialization, a rebuilt ESM-based CLI, and native observability via the new @nestjs/observe SDK. The release also includes several documented breaking changes around ESM usage, Node.js version requirements, route handling diagnostics, GraphQL subscription protocol changes, and structured logging defaults.
BreakingFeaturesv11.2.3
v11.2.3 is a patch release that addresses an issue related to circular durable providers. In addition to new integration coverage for forwardRef-based durable providers, the core injector logic changes how provider loading is triggered when no prior instantiation “donePromise” exists.
v11.2.2
This release (v11.2.2) hardens Nest's instrument.instanceDecorator handling to prevent application bootstrap crashes when the decorator inspects values that can throw (notably CLS proxy providers). It introduces a safe wrapper that catches decorator errors and falls back to the original instance, with added tests to cover the failure modes.
v11.2.1
v11.2.1 is a small patch release that fixes a core issue related to early return during SSE handling. It updates the router response controller so request-scoped cleanup tied to the SSE signal still runs when the response has already ended.
v11.2.0
v11.2.0 adds support for routing the HTTP QUERY method via a new @QueryMethod decorator and introduces SSE signal support through an @SseSignal AbortSignal parameter. In addition to these features, the release includes multiple bug fixes around routing and validation behavior, plus dependency updates.
Featuresv11.1.29
v11.1.29 contains a set of focused fixes across core and common modules, including improvements to SSE message serialization, middleware route overlap handling, and internal dependency resolution behavior. The release notes also mention a new file type validator option (override mimetype) and a few targeted microservices and express-related bug fixes.
Featuresv11.1.28
v11.1.28 includes a targeted core fix to ensure SSE producer Observables are properly torn down when a client disconnects mid-await with an interceptor. It also adds missing HTTP exception mappings in @nestjs/common and improves legacy route warning messages to include the auto-converted route, along with the documented fastify and multer dependency updates.
SecurityFeatures