Skip to content

chore(deps): bump @nestjs/config from 3.3.0 to 12.0.0 - #1086

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nestjs/config-4.0.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nestjs/config-4.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown

Bumps @nestjs/config from 3.3.0 to 12.0.0.

Release notes

Sourced from @​nestjs/config's releases.

12.0.0

What's Changed

@nestjs/config is now a native ES module, environment validation is built on Standard Schema instead of Joi-specific code, and the major version is aligned with the Nest 12 release line (there is no 5.x4.0.4 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

// ✅
import { ConfigModule, ConfigService } from '@nestjs/config';
// ❌ no longer resolvable
import { ConfigService } from '@​nestjs/config/dist/config.service';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support (Node 20.19+ / 22.12+), a CommonJS app can keep using require('@nestjs/config') unchanged.

Validation is now Standard Schema based

validationSchema accepts any schema implementing the Standard Schema spec — Zod (v3, v4, v4-mini), Valibot, ArkType, Joi 18+, and anything else that adopts it. There is no longer any Joi-specific code path in the module, and Joi is no longer implied as the validation library.

ConfigModule.forRoot({
  validationSchema: z.object({
    PORT: z.coerce.number().default(3000),
    DATABASE_NAME: z.string(),
  }),
});

Joi keeps working — it implements Standard Schema as of v18 — and the historical abortEarly: false / allowUnknown: true defaults are still applied automatically for Joi schemas, so existing Joi setups behave as before.

Breaking: validationOptions shape

Options are now the Standard Schema Options object, and library-specific settings move under libraryOptions:

// Before (4.x)
validationOptions: { allowUnknown: false, abortEarly: true }
// Now (12.x)
validationOptions: { libraryOptions: { allowUnknown: false, abortEarly: true } }

The generic parameter changed accordingly: ConfigModuleOptions<ValidationOptions extends StandardSchemaV1.Options>, and validationSchema is typed as StandardSchemaV1 rather than any — a schema that does not implement the spec is now a compile-time error instead of a runtime one.

... (truncated)

Commits
  • 269312f chore(): release v12.0.0
  • 5748c1f chore: upgrade to v12
  • d833a6a chore(deps): update dependency oxlint to v1.80.0 (#2408)
  • 4555cbc chore(deps): update nest monorepo to v11.2.3 (#2407)
  • 4561739 chore(deps): update dependency vite to v8.2.2 (#2406)
  • 0fc13bb chore(deps): update dependency joi to v18.2.5 (#2405)
  • 22642b8 chore(deps): update dependency oxlint to v1.79.0 (#2404)
  • d3a7dd5 chore(deps): update dependency vitest to v4.1.11 (#2403)
  • 8c87973 chore(deps): update dependency zod to v4.4.3 (#2402)
  • 949dc88 Merge pull request #2356 from nestjs/renovate/cimg-node-24.x
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nestjs/config-4.0.4 branch from a48163e to bf728b3 Compare August 24, 2026 17:59
Bumps [@nestjs/config](https://github.com/nestjs/config) from 3.3.0 to 12.0.0.
- [Release notes](https://github.com/nestjs/config/releases)
- [Commits](nestjs/config@3.3.0...12.0.0)

---
updated-dependencies:
- dependency-name: "@nestjs/config"
  dependency-version: 4.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump @nestjs/config from 3.3.0 to 4.0.4 chore(deps): bump @nestjs/config from 3.3.0 to 12.0.0 Sep 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nestjs/config-4.0.4 branch from bf728b3 to a7c67d1 Compare September 2, 2026 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants