Skip to content

Catalog / NestJS

11.2.8

23 Oct 2026todaychangedOriginal notes

What's changed

@nestjs/common
@nestjs/core
- fix(core,express,fastify): match excluded routes like the router does
- fix(core): match excluded routes exactly when the router is unknown
- fix(core): answer host mismatches on fastify with 404
- fix(core): never exclude request targets with "#" or in absolute form
- fix(core): mount unversioned middleware paths under the default version
- fix(core): map controller middleware under every module declaring it
- fix(core): mount transient-scoped middleware instead of skipping it — on v11 this also mounts the middleware listed after a transient one, which was skipped as well
- fix(core): drop an overlapped middleware route only when it is covered
- fix(core): mount wildcard middleware on every path when "/" is excluded
- fix(core): mount middleware paths on routes excluded from the prefix
- fix(core): stop wildcard exclusions from covering their parent route
- fix(core): run middleware on a controller root excluded by a wildcard
- fix(core,common): exclude a version only for requests that ask for it
- fix(core,microservices,websockets): ignore inherited keys of non-objects
- fix(core): stop the Observable producer when the client disconnects — backport of #17826
- fix(core): end sse responses to head requests once headers are sent
- fix(core): do not send the message of an unexposed http error
- fix(core): destroy a StreamableFile dropped by a timed-out handler
- fix(core): destroy a StreamableFile that is not sent
- fix(core,express,fastify): remove uploads of requests a pipe rejected
- fix(core): hand sse header errors to the exception filters
- fix(core): drop sse clients that stop reading their events
- fix(core): hide internal error messages from sse error events
- fix(core): make the sse pending data limit configurable
- fix(core): apply the expose flag of http errors to sse error events
- fix(core,microservices): run transient global enhancers on controllers — backport of #17993
- fix(core): stop silently dropping request-scoped global enhancers — backport of #18066; a global enhancer whose dependency tree is request-scoped is no longer silently skipped
- fix(core): fail at startup for request-scoped class global enhancers — backport of #18104; such an enhancer (e.g. APP_GUARD with useClass) now fails at startup instead of running without its dependencies
- fix(core): read class-level enhancers from the registered class
- fix(core): apply the enhancers of class providers under any token
- fix(core): run enhancers that are request-scoped through dependencies
- fix(core): fail at startup when a global enhancer is not instantiated
- fix(core): run transient global enhancers on static entry providers
- fix(core,websockets): run transient enhancers bound to static gateways
- fix(core): run guards bound as classes without a name
- fix(core): subscribe to guard observables from other copies of rxjs
- fix(core): run interceptor, pipe and filter classes without a name
@nestjs/platform-express
@nestjs/platform-fastify
@nestjs/microservices
@nestjs/websockets
@nestjs/platform-ws

Full Changelog: https://github.com/nestjs/nest/compare/v11.2.7...v11.2.8