NestJS

What's changed

• fix(microservices): handle unserializable patterns without crashing
• fix(platform-fastify): absolute-form request target middleware bypass

v12.0.2 (2026-09-14)

Bug fixes

• platform-socket.io, platform-ws
  • #17666 fix(socket.io): keep the message stream alive when a handler throws (@hktitof)
• microservices
  • #17728 fix(microservices): detach signal listeners of connected microservices (@kamilmysliwiec)
  • #17671 fix(microservices): fail requests whose reply subscription is rejected (@samuelmbabhazi)
  • #17670 fix(microservices): do not treat foreign JSON as an RPC envelope (@xia-chao)
  • #17644 fix(microservices): don't flatten plain handler results with pre-request hooks (@iamolegga)
  • #17641 fix(microservices): run the mqtt listen callback once (@johnnyhuirilef)
• common
  • #17710 fix(common): collapse duplicate internal slashes in normalizePath (@Asadshah7950)
  • #17655 fix(common): validate UUID v3 variant (@gwagjiug)
  • #17702 fix(common): treat empty string as array input in ParseArrayPipe (@xia-chao)
• core
  • #17667 fix(core): discover factory providers with discovery decorators (@hktitof)
  • #17709 fix(core): avoid treating error instances with statusCode as http errors (@Asadshah7950)
  • #17625 fix(core): clean up repeated shutdown signal listeners (@Raj4478)
• platform-fastify
  • #17705 fix(fastify): derive neutral version when accept header is absent (@Gaurav1112)
  • #17699 fix(fastify): send responses for exceptions thrown from middleware (@micalevisk)

Enhancements

• microservices
  • #17734 feat(microservices): add maxConnectionAttempts to ServerMqtt (@kamilmysliwiec)

Dependencies

• platform-fastify
  • #17729 fix(deps): update dependency fastify to v5.12.4 (@renovate[bot])

Committers: 16

• Abdellatif Anaflous (@hktitof)
• Alexey Solovyov (@lyohaplotinka)
• Asad Ali Shah (@Asadshah7950)
• Gyeonghun Park (@Gyeonghun-Park)
• Johnny J. Huirilef Millán (@johnnyhuirilef)
• Kamil Mysliwiec (@kamilmysliwiec)
• Kumar Gaurav (@Gaurav1112)
• Micael Levi L. Cavalcante (@micalevisk)
• Ming (@MingLin1995)
• Mohammed Said (@Se3do)
• Rajeshwar Singh (@Raj4478)
• Xia Chao (@xia-chao)
• @iamolegga
• cui fliter (@cuishuang)
• samuel mbabhazi (@samuelmbabhazi)
• 곽지욱 (@gwagjiug)

NestJS v12.0.0

NestJS 12 is centered around ESM-ready packages, first-class Standard Schema support for validation and serialization, a rebuilt CLI, and native observability through the new @nestjs/observe SDK.

Existing CommonJS applications keep working — migrating your own code to ESM is entirely optional.

📖 Full migration guide

---

Upgrading

Upgrade the CLI first, since the upgrade command ships with it:

npm i -g @nestjs/cli@latest

Then, from the root of your project:

nest upgrade

nest upgrade moves every @nestjs/* package to its v12-compatible major at once and applies the mechanical parts of the migration for you — nest-cli.json webpack options, the GraphQL playground → graphiql rename and subscriptions transport swap, the NATS package replacement, @nestjs/config validation options, Jest and Joi bumps — then prints a report of everything it changed and everything you still need to review by hand. Run it with --dry-run first to see that report without touching your files.

It deliberately does not migrate your project to ESM, Vitest, or oxlint. Those are the defaults for newly generated projects; existing projects adopt them on their own schedule.

Node.js: v12 requires Node.js v20.19+ or v22.12+. Both require(esm) and the ESM packages depend on it; the upgrade command refuses to run on older releases (including the 21.x line). The latest active LTS is recommended.

---

Highlights

ESM packages

All core Nest packages now ship as ESM. Thanks to require(esm) in modern Node.js, most existing CommonJS applications continue to work without a rewrite. Review custom bootstrapping scripts, build tooling, and test runners if they assume CommonJS-only packages.

nest new now asks whether to scaffold a CommonJS or an ESM project.

Standard Schema validation

Route parameter decorators — @Body(), @Query(), @Param(), @RawBody() — accept a new schema option, designed for Standard Schema compatible libraries such as Zod, Valibot, and ArkType:

@Post()
create(@Body({ schema: createUserSchema }) body: CreateUserDto) {
  return this.usersService.create(body);
}

@Get(':id')
findOne(@Param('id', { schema: z.coerce.number().int().positive() }) id: number) {
  return this.usersService.findOne(id);
}

The decorator only attaches metadata; register the new StandardSchemaValidationPipe to validate against it:

app.useGlobalPipes(new StandardSchemaValidationPipe());

The same schemas feed OpenAPI generation. The decorator-based class-validator workflow remains fully supported, with no plan to remove it.

Standard Schema serialization

StandardSchemaSerializerInterceptor validates and transforms outgoing responses with the same ecosystem:

@UseInterceptors(StandardSchemaSerializerInterceptor)
@SerializeOptions({ schema: userResponseSchema })
@Get(':id')
findOne(@Param('id') id: string) {
  return this.usersService.findOne(id);
}

Pick per use case: ValidationPipe / ClassSerializerInterceptor for class-based DTOs, the Standard Schema variants when your schemas already exist.

Native observability — @nestjs/observe

The official NestJS Observe SDK plugs into Nest's own request lifecycle through the instrument application option, rather than patching the HTTP server like a generic APM agent. Requests, jobs, errors, and traces are reported in terms of your controllers, providers, resolvers, and queue consumers:

export const { ObserveModule, ObserveInstrument } = createObserveModule();

const app = await NestFactory.create(AppModule, {
  instrument: ObserveInstrument,
});

Auto-instrumentation covers HTTP, GraphQL, gRPC, and microservice transports, plus queue consumers and cron runs — no manual span wiring and no collector to run. Opt-in and new; nothing to migrate. nest new and nest upgrade can wire it up for you (--observe). See the Observability chapter.

Config module on Standard Schema

@nestjs/config moves from Joi-specific validation to Standard Schema. validationSchema now accepts any compatible schema:

ConfigModule.forRoot({
  validationSchema: z.object({
    NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
    PORT: z.coerce.number().default(3000),
  }),
});

Existing Joi schemas still work with two caveats: upgrade to Joi v18+ (the first release implementing Standard Schema), and move library-specific settings under validationOptions.libraryOptions.

Route conflict diagnostics

Routes are registered in declaration order, so on order-sensitive adapters @Get(':id') can silently shadow a @Get('me') declared after it. Two opt-in options surface this:

const app = await NestFactory.create(AppModule, {
  routeConflictPolicy: { duplicate: 'error', shadow: 'warn' },
  routeResolutionStrategy: 'specificity',
});

Both default to the previous behavior, so nothing changes unless you set them.

Machine-readable error codes

HttpExceptionOptions accepts an errorCode that is serialized into the response body, so clients branch on a stable identifier instead of parsing message strings:

throw new BadRequestException('Password is too weak', { errorCode: 'WEAK_PASSWORD' });

Structured logging params

ConsoleLogger now treats plain objects passed after the message as structured params of the same log entry instead of separate records:

logger.log('User created', { userId: 1, email: 'foo@bar.com' });

In JSON mode they nest under params, or spread into the root with flattenParams. On by default; set structuredParams: false to restore the old behavior.

---

CLI (@nestjs/cli v12)

The CLI was rebuilt in nestjs/nest-cli#3280: the entire source migrated to ESM, tests moved from Jest to Vitest, e2e tests were added for every command, and command classes were refactored to take typed context objects instead of untyped inputs and option arrays.

New commands

• nest upgrade (alias update) — upgrades a v11 project to v12 and applies the migration steps described above.
• nest deploy — deploys your application to the cloud via Mau, installing @nestjs/mau on first use and forwarding every argument straight through.

Defaults and tooling

• Rspack is the new default bundler for monorepos. The --webpack / --webpackPath flags (and their webpack / webpackConfigPath counterparts in nest-cli.json) are deprecated in favor of --builder rspack.
• oxlint replaces ESLint in generated projects.
• Vitest is the default test runner for ESM projects; CommonJS projects continue with Jest.
• bun is now a supported package manager, alongside npm, yarn, and pnpm.
• The decorator schematic generates decorators using the preferred Reflector.createDecorator() form. The angular schematic has been removed.

New options

• nest build / nest start: --rspackPath [path], --emit-declarations (SWC), --no-type-check, --silent
• nest build: --parallel [concurrency], for building monorepo projects in parallel with --all
• nest-cli.json: includeLibraryAssets, for copying library assets into an application build

---

Breaking changes

Change	What to do
Packages ship as ESM	Usually nothing — require(esm) keeps CommonJS apps working. Review custom bootstrapping, bundler, and test-runner config.
Node.js v20.19+ / v22.12+ required	Upgrade Node; the 21.x line is not supported.
Lifecycle hooks are now invoked by component hierarchy level	Review ordering assumptions between related providers/modules in init, teardown, and tests.
NATS v3 — the nats package is replaced by @nats-io/transport-node	npm uninstall nats && npm install @nats-io/transport-node; update direct imports. Packets are now serialized as JSON strings and custom deserializers receive the full NATS message — read payloads with msg.json().
GraphQL subscriptions — subscriptions-transport-ws support removed	Switch to graphql-ws; the protocols are wire-incompatible, so clients must be updated. Review onConnect callbacks.
GraphiQL is the default GraphQL IDE	Replace playground with graphiql; pass an options object to customize.
@nestjs/config validates through Standard Schema	Keep Joi by upgrading to v18+ and moving library settings under validationOptions.libraryOptions.
Pipe transform signatures refined; ArgumentMetadata is now generic	Adjust hand-written custom pipe signatures if the compiler complains.
ConsoleLogger structured params on by default	Set structuredParams: false to restore the previous output.
Webpack CLI workflows deprecated	Migrate to --builder rspack.
angular schematic removed	—

Most of these are handled automatically by nest upgrade.

---

Also in this release

• ValidationPipe error format — a new option controls the shape of validation error responses.
• gRPC exception filter — GrpcExceptionFilter and status-specific exceptions map errors to proper gRPC status codes instead of UNKNOWN.
• Regex Kafka patterns — @MessagePattern() and @EventPattern() accept a RegExp on the Kafka transport.
• Request-scoped WebSocket gateways — gateways support request-scoped providers, with the socket injectable via the REQUEST token.
• WebSocket disconnect reason — handleDisconnect can receive the reason for the disconnection.
• Microservices pre-request hook — a new hook runs before a message handler is invoked.
• Express graceful shutdown — the Express adapter drains in-flight requests on shutdown.
• HTTP adapter error mapping — reworked across core, Express, and Fastify adapters.

---

Thanks

Thank you to everyone who contributed code, issues, reproductions, and reviews to this release. 💛

If NestJS helps you build your products, consider supporting the project.

What's Changed

• fix(core): circular durable providers issue by @kamilmysliwiec in https://github.com/nestjs/nest/pull/17563

Full Changelog: https://github.com/nestjs/nest/compare/v11.2.2...v11.2.3

What's changed

• fix(core): ObserveInstrument breaks app startup with @nestjs/core@11.2.x #17554 by @kamilmysliwiec
• fix(core): Bootstrap crashes with nestjs-cls proxy providers (ProxyProviderNotResolvedException on CLS_REQ) #17553 by @kamilmysliwiec

What's Changed

• fix(core): early-return SSE abort issue by @kamilmysliwiec

Full Changelog: https://github.com/nestjs/nest/compare/v11.2.0...v11.2.1

What's Changed

• fix(core): share existing singleton providers with lazily loaded modules by @shariyerShazan in https://github.com/nestjs/nest/pull/17430
• fix(common): match string file types containing regex metacharacters by @Jaybhade in https://github.com/nestjs/nest/pull/17435
• fix(core): convert adjacent wildcard segments in legacy route converter by @eeshsaxena in https://github.com/nestjs/nest/pull/17416
• fix(fastify): run middleware on routes excluded from global prefix by @Arun445 in https://github.com/nestjs/nest/pull/17377
• fix(fastify): avoid double prefixing inherited middleware by @GiHoon1123 in https://github.com/nestjs/nest/pull/17350
• fix(core): scan pre-registered dynamic imports of lazy modules by @johnnyhuirilef in https://github.com/nestjs/nest/pull/17464
• feat(core,common,platform-fastify): add query http method support by @gacardinal in https://github.com/nestjs/nest/pull/17162
• fix(common): exclude reverse-mapped keys from numeric enum validation in ParseEnumPipe by @LeSingh1 in https://github.com/nestjs/nest/pull/17086
• test(testing): Add e2e integration tests for HTTP QUERY method (RFC 10008) by @brayanjeshua in https://github.com/nestjs/nest/pull/17310
• feat(core): sse signal by @kamilmysliwiec in https://github.com/nestjs/nest/pull/17469
• chore(deps): update dependency fastify to v5.12.0 by @renovate[bot] in https://github.com/nestjs/nest/pull/17473

New Contributors

• @shariyerShazan made their first contribution in https://github.com/nestjs/nest/pull/17430
• @Jaybhade made their first contribution in https://github.com/nestjs/nest/pull/17435
• @eeshsaxena made their first contribution in https://github.com/nestjs/nest/pull/17416
• @Arun445 made their first contribution in https://github.com/nestjs/nest/pull/17377
• @GiHoon1123 made their first contribution in https://github.com/nestjs/nest/pull/17350
• @johnnyhuirilef made their first contribution in https://github.com/nestjs/nest/pull/17464
• @gacardinal made their first contribution in https://github.com/nestjs/nest/pull/17162
• @LeSingh1 made their first contribution in https://github.com/nestjs/nest/pull/17086
• @brayanjeshua made their first contribution in https://github.com/nestjs/nest/pull/17310

Full Changelog: https://github.com/nestjs/nest/compare/v11.1.29...v11.2.0

What's Changed

• fix(core): stop import lookup after first direct export match by @malekelkssas in https://github.com/nestjs/nest/pull/17141
• chore: update multerExceptions constant by @bo0tzz in https://github.com/nestjs/nest/pull/17328
• fix(microservices): correct pub/sub client type in redis listeners by @zaewc in https://github.com/nestjs/nest/pull/17331
• feat(common): add override mimetype option to file type validator by @Ativ3k in https://github.com/nestjs/nest/pull/17333
• fix(core): drop the g flag from middleware overlap regexes by @dchaudhari7177 in https://github.com/nestjs/nest/pull/17335
• feat(core): support sse comments by @kyu4583 in https://github.com/nestjs/nest/pull/17327
• fix(core): resolve barrier immediately when target count is zero by @ikrbasak in https://github.com/nestjs/nest/pull/17393
• fix(common): exclude pipe options from validator options by @coxxny in https://github.com/nestjs/nest/pull/17399
• fix(core): serialize SSE retry field when value is zero by @kyu4583 in https://github.com/nestjs/nest/pull/17360
• fix(microservices): nullify grpcclient on close when tryshutdown fails by @Se3do in https://github.com/nestjs/nest/pull/17394
• fix(express): map missing multer field nesting error by @Se3do in https://github.com/nestjs/nest/pull/17421

New Contributors

• @malekelkssas made their first contribution in https://github.com/nestjs/nest/pull/17141
• @hjc0930 made their first contribution in https://github.com/nestjs/nest/pull/17311
• @bo0tzz made their first contribution in https://github.com/nestjs/nest/pull/17328
• @Ativ3k made their first contribution in https://github.com/nestjs/nest/pull/17333
• @dchaudhari7177 made their first contribution in https://github.com/nestjs/nest/pull/17335
• @kyu4583 made their first contribution in https://github.com/nestjs/nest/pull/17327
• @anupamme made their first contribution in https://github.com/nestjs/nest/pull/17378
• @ikrbasak made their first contribution in https://github.com/nestjs/nest/pull/17393
• @beiifeng made their first contribution in https://github.com/nestjs/nest/pull/17404
• @coxxny made their first contribution in https://github.com/nestjs/nest/pull/17399

Full Changelog: https://github.com/nestjs/nest/compare/v11.1.28...v11.1.29

v11.1.28 (2026-07-08)

Bug fixes

• core
  • #17239 fix(core): trigger teardown of SSE producer Observable on client disconnect with interceptor (@jyx-07)
• common
  • #17257 fix(common): Add missing exception classes to HttpErrorByCode (@Se3do)
• websockets
  • #17188 fix(websockets): correct type guard to check value not key (@Se3do)

Enhancements

• core
  • #17241 feat(core): include auto-converted route in legacy route path warning (@ronielli)

Dependencies

• platform-fastify
  • #17262 chore(deps): bump fastify from 5.8.5 to 5.10.0 (@dependabot[bot])
• platform-express
  • #17164 fix(deps): update dependency multer to v2.2.0 [security] (@renovate[bot])

Committers: 4

• Mohammed Said (@Se3do)
• Ronielli (@ronielli)
• greymoth (@greymoth-jp)
• 종윤 (@jyx-07)

What's Changed

• fix(core): sse async handlers teardown issue by @kamilmysliwiec in https://github.com/nestjs/nest/pull/17131
• fix(platform-fastify): forRoutes middleware ending slash by @kamilmysliwiec in https://github.com/nestjs/nest/pull/17138

Full Changelog: https://github.com/nestjs/nest/compare/v11.1.26...v11.1.27

What's Changed

• fix(core): post sse endpoint empty response #17098 by @kamilmysliwiec in https://github.com/nestjs/nest/pull/17099

Full Changelog: https://github.com/nestjs/nest/compare/v11.1.25...v11.1.26

What's Changed

• fix(microservices): reject pending Redis requests on close by @yudin-s in https://github.com/nestjs/nest/pull/17024
• fix(core): register SSE close listener before async setup by @fallintoplace in https://github.com/nestjs/nest/pull/17018
• fix(platform-fastify): remove pathname ending slash by @kamilmysliwiec in https://github.com/nestjs/nest/pull/17094

New Contributors

• @fallintoplace made their first contribution in https://github.com/nestjs/nest/pull/17018
• @DucMinhNe made their first contribution in https://github.com/nestjs/nest/pull/17085
• @iambeaukim made their first contribution in https://github.com/nestjs/nest/pull/17091

Full Changelog: https://github.com/nestjs/nest/compare/v11.1.24...v11.1.25

v11.1.24 (2026-05-25)

Bug fixes

• core
  • #17009 fix(core): reset dependency-tree cache on metadata changes (@puneetdixit200)

Enhancements

• core
  • #16997 feat(core): warn on late websocket adapter registration (@hbinhng)

Dependencies

• platform-ws
  • #17011 chore(deps): bump ws from 8.20.1 to 8.21.0 (@dependabot[bot])

Committers: 2

• Nguyễn Hải Bình (@hbinhng)
• Puneet Dixit (@puneetdixit200)

v11.1.23 (2026-05-21)

Bug fixes

• core
  • https://github.com/nestjs/nest/issues/16998 fix snapshot: true eagerly instantiates Terminus transient indicators since 11.1.20

Committers: 1

• Kamil Mysliwiec (@kamilmysliwiec)

v11.1.22 (2026-05-21)

Bug fixes

• core
  • #16993 fix(core): inflight request injection bug #16989 (@kamilmysliwiec)

Enhancements

• core
  • #16967 fix(core): identify decorator type in invalid-class-module error (@HarrierOnChain)

Committers: 2

• Harrier (@HarrierOnChain)
• Kamil Mysliwiec (@kamilmysliwiec)

v11.1.21 (2026-05-14)

Bug fixes

• core
  • #16948 fix(core): settle skipped provider initialization (@yudin-s)

Committers: 1

• Serge Yudin (@yudin-s)

v11.1.20 (2026-05-13)

Bug fixes

• core, testing
  • #16939 fix(core): fix deeply nested transient providers resolution (@kamilmysliwiec)
• core
  • #16861 fix(core): fix @Sse losing events on complete (@MatthiasBrehmer)
  • #16753 fix(core): defer sse writehead until after lifecycle completes (@jkalberer)
  • #16782 fix(core): use strict null check for SSE message id (@burhanharoon)
• microservices
  • #16850 fix(microservices): ServerRMQ crashes at boot when @MessagePattern(undefined) is combined with wildcards: true (@lavieennoir)
• common
  • #16845 fix(common): accept zero timestamp in parse date pipe (@Mysh3ll)
• platform-socket.io
  • #16742 fix(socket.io): Deduplicate disconnect listener in bindMessageHandlers (@fru1tworld)

Enhancements

• microservices
  • #16676 feat(microservices): add return buffers option for binary data (@Forceres)
  • #16826 feat(microservices): handle rmq blocked/unblocked connection events (@thisalihassan)
• common
  • #16902 fix(common): filetype validator buffer message (@QusaiAlbonni)
• platform-express
  • #16844 feat(platform-express): add defParamCharset to MulterOptions (@starnayuta)

Dependencies

• platform-ws
  • #16941 chore(deps): bump ws from 8.20.0 to 8.20.1 (@dependabot[bot])

Committers: 13

• Ali Hassan (@thisalihassan)
• Burhan Haroon⚡ (@burhanharoon)
• Dmytro Khyzhniak (@lavieennoir)
• Harsh Rathod (@harshrathod50)
• IlyaCredo (@Forceres)
• Kamil Mysliwiec (@kamilmysliwiec)
• Mysh3ll (@Mysh3ll)
• @MatthiasBrehmer
• @QusaiAlbonni
• @jkalberer
• @pazaderey
• fru1tworld (@fru1tworld)
• starnayuta (@starnayuta)

v11.1.19 (2026-04-13)

Bug fixes

• microservices
  • #16762 fix(microservices): use backing field for consumer CRASH event listener (@burhanharoon)
  • #16764 fix(microservices): prevent stack overflow in jsonsocket.handledata() (@kamilmysliwiec)

Committers: 2

• Burhan Haroon⚡ (@burhanharoon)
• Kamil Mysliwiec (@kamilmysliwiec)