Skip to content

chore(deps): bump @nestjs/config from 4.0.4 to 12.0.1 - #265

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nestjs/config-12.0.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nestjs/config-12.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 27, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @nestjs/config from 4.0.4 to 12.0.1.

Release notes

Sourced from @​nestjs/config's releases.

Release 12.0.1

What's Changed

New Contributors

Full Changelog: nestjs/config@12.0.0...12.0.1

12.0.0

What's Changed

@nestjs/config is now a native ES module, environment validation is built on Standard Schema instead of Joi-specific code, and the major version is aligned with the Nest 12 release line (there is no 5.x — 4.0.4 goes straight to 12.0.0).

ESM migration

The package is published as pure ESM ("type": "module", compiled with NodeNext) behind a proper exports map. The legacy root index.js / index.d.ts shims are gone, and deep imports into build internals are no longer resolvable — import from the package root.

// ✅
import { ConfigModule, ConfigService } from '@nestjs/config';
// ❌ no longer resolvable
import { ConfigService } from '@​nestjs/config/dist/config.service';

require(esm) — CommonJS still works

You do not need to convert your app to ESM. Thanks to Node's require(esm) support (Node 20.19+ / 22.12+), a CommonJS app can keep using require('@nestjs/config') unchanged.

Validation is now Standard Schema based

validationSchema accepts any schema implementing the Standard Schema spec — Zod (v3, v4, v4-mini), Valibot, ArkType, Joi 18+, and anything else that adopts it. There is no longer any Joi-specific code path in the module, and Joi is no longer implied as the validation library.

ConfigModule.forRoot({
  validationSchema: z.object({
    PORT: z.coerce.number().default(3000),
    DATABASE_NAME: z.string(),
  }),
});

Joi keeps working — it implements Standard Schema as of v18 — and the historical abortEarly: false / allowUnknown: true defaults are still applied automatically for Joi schemas, so existing Joi setups behave as before.

Breaking: validationOptions shape

Options are now the Standard Schema Options object, and library-specific settings move under libraryOptions:

... (truncated)

Commits
  • 2785b5f chore(): release v12.0.1
  • 0c0a0d6 fix(deps): update dependency dotenv to v18.0.3 (#2444)
  • 130ee69 fix(deps): update dependency es-toolkit to v1.52.0 (#2411)
  • ab84892 chore(deps): update node.js to v24.21.0 (#2420)
  • d71b4a8 fix(config): prevent prefix corruption and escape propertyPath in updateInter...
  • 498b207 fix(deps): update dependency dotenv to v18 (#2437)
  • c32556f chore(deps): update dependency oxlint to v1.85.0 (#2443)
  • 58af4ad chore(deps): update nest monorepo to v12.0.4 (#2442)
  • 56fdf53 chore(deps): update commitlint monorepo to v21.2.3 (#2441)
  • 73353eb chore(deps): update dependency @​types/node to v24.13.6 (#2440)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nestjs/config-12.0.1 branch from d026a7d to c0f3446 Compare October 7, 2026 08:41
Bumps [@nestjs/config](https://github.com/nestjs/config) from 4.0.4 to 12.0.1.
- [Release notes](https://github.com/nestjs/config/releases)
- [Commits](nestjs/config@4.0.4...12.0.1)

---
updated-dependencies:
- dependency-name: "@nestjs/config"
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nestjs/config-12.0.1 branch from c0f3446 to b6cb6cd Compare October 7, 2026 09:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants