v12.0.4 v12.1.0
nestjs/nestSep 21, 2026 → Sep 23, 20262 days between releases
What's New
Introduces CSRF protection, cookies, and array prefixes; fixes Redis and middleware logic.
New Features
- Support for an array of global prefixes
- Built-in, adapter-agnostic cookies
- Built-in CSRF protection and security headers
- File upload interceptors for Fastify
Improvements
- Middleware behavior regarding transient middleware
- Route handler name preservation
- Redis client retry logic
Bug Fixes
- Redis client retry logic
- Constructor parameter inheritance
- Middleware behavior regarding transient middleware
Upgrade Notes
You can now configure an array of global prefixes and utilize built-in cookies and CSRF protection. Ensure Fastify applications use the new file upload interceptors. Be aware that middleware behavior regarding transient middleware has changed.
The Two Releases
Sep 21, 2026· 1 month ago
A maintenance release focusing on bug fixes for microservices (Kafka, RabbitMQ, NATS, gRPC) and the core module, along with dependency updates.
Full release notesSep 23, 2026· 29 days ago
This release focuses on stabilizing core functionality, improving microservices reliability, and introducing new security and utility features like CSRF protection, built-in cookies, and file upload support for Fastify.
Full release notes