TL;DR

NestJS now eagerly instantiates Terminus health indicators (health checks) when using snapshot: true, resolving an issue where they weren’t available immediately.

Fixes Worth Knowing

• Fixed a bug where Terminus health indicators weren’t immediately available with snapshot: true.
• Corrected an issue with request injection in the core module.
• Improved error messages to better identify the type of decorator causing module errors.

Before You Upgrade

If you rely on Terminus health indicators being immediately available after application startup with snapshot: true, no action is needed – this release resolves that behavior.

TL;DR

NestJS updates its Express (web server framework) dependencies to address a critical security vulnerability, protecting applications from potential attacks.

Fixes Worth Knowing

Updated Express and body-parser dependencies resolve a critical security vulnerability (CVE-2025-15284) that could allow for malicious code execution.

Before You Upgrade

No specific action is needed; simply update to the latest NestJS version to receive the security patches.

TL;DR

NestJS now supports TLS for TCP microservices, enhancing security for inter-service communication.

New

• TLS for TCP Microservices: Secure communication between microservices using Transport Layer Security (TLS).
• Microservice Extensibility: Allows extending microservice event and message extras for custom logic.

Fixes Worth Knowing

• WebSockets: Fixed an issue mounting multiple WebSocket servers on different paths.
• Express Body Parsing: Removed redundant type definitions for Express body-parser, improving type safety.

Before You Upgrade

No specific action is required for this update.

TL;DR

NestJS now exposes base context for microservices, improving access to request information within your applications.

Fixes Worth Knowing

RabbitMQ connection hangs in microservices now provide feedback messages, aiding in debugging connection issues. Performance of stripProtoKeys has been improved, especially when working with TypedArrays (binary data).

TL;DR

Nest now supports Server-Sent Events (SSE) for real-time updates, enabling easier push functionality in applications.

New

• Server-Sent Events (SSE) support added.
• abortOnError option allows Nest to re-throw exceptions instead of crashing the process.

Fixes Worth Knowing

• ValidationPipe now prioritizes expectedType over metatype for more predictable behavior.
• Fixed middleware execution order issues when using request-scoped dependencies.
• Microservices now properly disconnect consumers and producers.

TL;DR

NestJS now supports request cancellation with Axios via the HttpModule, improving control over network requests.

New

• Added support for request cancellation using Axios and the HttpModule.
• Improved type safety for custom decorators.
• gRPC packages can now be used simultaneously in microservices.

Fixes Worth Knowing

• Lifecycle hooks now run correctly for middleware and injectables.
• Application’s global prefix is now correctly applied to error handlers and global middleware.

TL;DR

NestJS applications now correctly handle validation errors and base paths, resolving issues with error responses and module loading.

Fixes Worth Knowing

• Validation errors are now reported correctly.
• Base path configuration is compatible with module paths.
• Middleware now triggers correctly when query parameters are present when using the Fastify adapter (a Node.js web framework).

TL;DR

Nest now supports Fastify (a fast web framework) alongside Express, offering greater flexibility and performance options for building server-side applications.

Breaking

• Replace @Component(), @Middleware(), @Interceptor(), @Pipe(), and @Guard() with @Injectable().
• Change modules: [] to imports: [] in module definitions.
• Change components: [] to providers: [] in module definitions.

New

• Async Lifecycle Hooks: Modules can now implement OnModuleInit and OnModuleDestroy for asynchronous initialization and cleanup.
• Global Providers: Global interceptors, filters, pipes, and guards can be configured from any module using APP_INTERCEPTOR, etc.
• Microservices: Improved existing transporters and added support for Nats, MQTT, and gRPC.

Fixes Worth Knowing

• Resolved issues with parameter pipes and ExpressAdapter wrappers.
• Fixed concurrency problems in TCP and Redis microservice transporters.
• Corrected issues with multer file uploads.

Before You Upgrade

• Update your code to use @Injectable() instead of the deprecated decorators.
• Migrate from

TL;DR

Nest applications are more reliable with fixes to file uploads, microservices, and module loading, preventing common server errors and improving error messages.

Fixes Worth Knowing

• File uploads now correctly return HTTP status codes.
• Microservices handle message patterns more reliably.
• Module import errors now provide clearer, more helpful messages (dependency issues).