chore(deps): bump the patch-updates group across 1 directory with 3 updates

[dependabot]

Bumps the patch-updates group with 2 updates in the / directory: @nestjs/swagger and nestjs-cls.

Updates @nestjs/swagger from 11.4.6 to 11.4.7

Release notes

Sourced from @​nestjs/swagger's releases.

11.4.7

What's Changed

• fix(plugin): preserve inferred responses for enum error statuses by @​GiHoon1123 in nestjs/swagger#4014
• chore(deps): update dependency @​fastify/static to v10 [security] by @​renovate[bot] in nestjs/swagger#4028
• feat(interfaces): export full OpenAPI object-model types in public API by @​Fcmam5 in nestjs/swagger#4048
• fix(plugin): handle decorators with property access expressions in getIdentifierFromName by @​jorenl in nestjs/swagger#4042
• fix(deps): update dependency js-yaml to v5.3.0 by @​renovate[bot] in nestjs/swagger#4053
• feat(api-header): support custom OpenAPI extensions by @​kyungseopk1m in nestjs/swagger#4047
• fix(type-helpers): apply deep partial substitution to plugin metadata by @​kyungseopk1m in nestjs/swagger#4030
• fix(plugin): rebase readonly import paths onto the output directory by @​kyungseopk1m in nestjs/swagger#4019
• fix(plugin): generate object examples from @​example doc tags by @​y-hsgw in nestjs/swagger#4005

New Contributors

• @​GiHoon1123 made their first contribution in nestjs/swagger#4014
• @​Fcmam5 made their first contribution in nestjs/swagger#4048
• @​jorenl made their first contribution in nestjs/swagger#4042

Full Changelog: nestjs/swagger@11.4.6...11.4.7

Commits

• 77e3d46 chore(): release v11.4.7
• 782cdc0 Merge pull request #4056 from nestjs/renovate/js-yaml-5.x-lockfile
• 4a5a4b0 Merge pull request #4005 from y-hsgw/fix/plugin-object-example
• 11b3fb6 chore(deps): update dependency js-yaml to v5.3.0
• e5203bf Merge pull request #4019 from kyungseopk1m/fix/readonly-outdir-import-path
• fccfa59 Merge pull request #4030 from kyungseopk1m/fix/deep-partial-type-plugin-metadata
• 91e5917 Merge pull request #4047 from kyungseopk1m/feat/api-header-extensions
• 1296583 Merge pull request #4053 from nestjs/renovate/js-yaml-5.x
• f436f56 Merge pull request #4054 from nestjs/renovate/fastify-static-10.x
• b293944 Merge pull request #4042 from jorenl/bugfix/plugin-get-identifier-from-name-p...
• Additional commits viewable in compare view

Updates nestjs-cls from 6.2.1 to 6.2.2

Release notes

Sourced from nestjs-cls's releases.

nestjs-cls@6.2.2

6.2.2 "nestjs-cls" (2026-08-25)

Bug fixes

• core: proxy provider improvements - optional deps, better error messages, docs caveats (#579)

Support OptionalFactoryDependency in inject arrays (closes #381)

Factory proxy providers now accept { token: T, optional: true } in inject:

ClsModule.forFeatureAsync({
  provide: MY_PROXY,
  inject: [{ token: SomeService, optional: true }],
  useFactory: (svc?: SomeService) => ({ value: svc?.getValue() ?? 'default' }),
});

@Optional() on class proxy constructor params already worked.

Throw on invalid factory return values (closes #375)

Factories returning null, undefined, or a primitive now throw ProxyProviderInvalidReturnTypeException instead of silently producing a broken proxy.

Commits

• e3110b8 chore: release packages [skip ci]
• 70b172a fix(core): proxy provider improvements - optional deps, better error messages...
• d1cec03 chore: release packages [skip ci]
• 5417f21 feat(transactional-adapter-drizzle-orm): accept drizzle-orm v1 in the peer ra...
• fbb6f4c Remove orphaned .claude/worktrees gitlink causing Actions submodule cleanup...
• 48ad683 chore: release packages [skip ci]
• 9956a92 feat(transactional-adapter-drizzle-orm): support better-sqlite3 via transacti...
• See full diff in compare view

Updates js-yaml from 3.15.1 to 3.15.2

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

• [backport] Hard-limit merge sequence size to 100.

Security

• [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

Commits

• 5c45bd6 3.15.2 released
• 5a708f9 dist rebuild
• 3485bc0 Backport merge limits from v5.4.1
• f34812f Update .gitignore
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: pnpm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.