fix(deps): update dependency @fastify/swagger to v9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@fastify/swagger	^8.15.0 → ^9.0.0

---

Release Notes

fastify/fastify-swagger (@​fastify/swagger)

v9.6.1

Compare Source

What's Changed

• Fix convertConstToEnum type typo by @​TastyPi in #​901

Full Changelog: fastify/fastify-swagger@v9.6.0...v9.6.1

v9.6.0

Compare Source

What's Changed

• ci(ci): add concurrency config by @​Fdawgs in #​898
• chore(deps-dev): bump joi-to-json from 4.3.2 to 5.0.0 by @​dependabot[bot] in #​900
• chore(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​899
• Support not converting const to enum by @​TastyPi in #​877

New Contributors

• @​TastyPi made their first contribution in #​877

Full Changelog: fastify/fastify-swagger@v9.5.2...v9.6.0

v9.5.2

Compare Source

What's Changed

• chore(ci): fix node 24 tests by @​rozzilla in #​873
• refactor: remove unused done function by @​inyourtime in #​874
• docs: use cross-platform compatible info emoji by @​Fdawgs in #​875
• chore(license): update date ranges; standardise style by @​Fdawgs in #​880
• chore: remove .taprc file by @​Tony133 in #​884
• fix: ignore typing Tests by @​Uzlopak in #​883
• chore(deps-dev): bump @​apidevtools/swagger-parser from 10.1.1 to 12.0.0 by @​dependabot[bot] in #​885
• chore(deps-dev): bump @​types/node from 22.15.34 to 24.0.8 by @​dependabot[bot] in #​886
• docs: add note on @​fastify/swagger registration order by @​RemyMachado in #​891
• docs(readme): fix note style by @​Fdawgs in #​892
• Remove redundant check by @​fedyk in #​895
• chore(.npmrc): ignore scripts by @​Fdawgs in #​896
• build(deps-dev): remove @​fastify/pre-commit by @​Fdawgs in #​897
• fix: remove defs when ref already defined in schema by @​cyky in #​888

New Contributors

• @​Tony133 made their first contribution in #​884
• @​RemyMachado made their first contribution in #​891
• @​fedyk made their first contribution in #​895
• @​cyky made their first contribution in #​888

Full Changelog: fastify/fastify-swagger@v9.5.1...v9.5.2

v9.5.1

Compare Source

What's Changed

• chore(deps-dev): bump fluent-json-schema from 5.0.0 to 6.0.0 by @​dependabot in #​869
• chore(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @​dependabot in #​870
• fix: prevent mutation of response headers schema by @​inyourtime in #​871
• fix(types): fix route config options by @​inyourtime in #​867

New Contributors

• @​inyourtime made their first contribution in #​871

Full Changelog: fastify/fastify-swagger@v9.5.0...v9.5.1

v9.5.0

Compare Source

• fix: added transform types to export (#​866)
• docs(readme): update plugin version syntax (#​862)
• docs(readme): update link for fastify-api-reference integration (#​859)
• docs(readme): remove references to the old included ui
• docs(readme): conciseness improvements (#​857)

v9.4.2

Compare Source

What's Changed

• build(dependabot): reduce npm updates to monthly by @​Fdawgs in #​855
• fix: bump json-schema-resolver by @​Eomm in #​856

Full Changelog: fastify/fastify-swagger@v9.4.1...v9.4.2

v9.4.1

Compare Source

What's Changed

• docs(readme): update ci badge syntax by @​Fdawgs in #​841
• build(deps-dev): replace standard with neostandard by @​Fdawgs in #​842
• chore(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @​dependabot in #​844
• build(deps-dev): add eslint, peer dep of neostandard by @​Fdawgs in #​845
• chore(package): add funding by @​Fdawgs in #​846
• test: remove unused params by @​Fdawgs in #​847
• refactor: prefix unused params with underscores by @​Fdawgs in #​848
• refactor(lib/util/read-package-json): remove unused catch binding by @​Fdawgs in #​849
• test: migrate from tap to node:test and c8 by @​R-Campbell in #​843
• perf: use optional chaining by @​Fdawgs in #​850
• fix(types): fix plugin options by @​Uzlopak in #​851
• perf(lib): replace accumulator spread with object.assign by @​Fdawgs in #​852
• docs(readme): spelling and grammar fixes by @​Fdawgs in #​853

Full Changelog: fastify/fastify-swagger@v9.4.0...v9.4.1

v9.4.0

Compare Source

What's Changed

• ci(ci): rename ci workflow by @​Fdawgs in #​840
• feat: Add custom decorator support by @​R-Campbell in #​837

Full Changelog: fastify/fastify-swagger@v9.3.0...v9.4.0

v9.3.0

Compare Source

What's Changed

• chore(deps-dev): bump @​fastify/cookie from 10.0.1 to 11.0.1 by @​dependabot in #​827
• docs: Adding Fastify 5 Compatibilty Row by @​smrrazavian in #​828
• feat(openapi): add support for callbacks by @​ThomasFlorelli in #​829
• refactor(test/spec/openapi/option): use Object.hasOwn() by @​Fdawgs in #​831
• fix: soft fail fallback response description lookups by @​samchungy in #​832
• chore(deps): bump fastify/workflows from 5.0.0 to 5.0.1 by @​dependabot in #​833
• docs(readme): standardize compatibility table style by @​Fdawgs in #​834
• style: remove trailing whitespace by @​Fdawgs in #​835
• fix(openapi): support full callbacks spec by @​R-Campbell in #​838

New Contributors

• @​smrrazavian made their first contribution in #​828
• @​ThomasFlorelli made their first contribution in #​829
• @​R-Campbell made their first contribution in #​838

Full Changelog: fastify/fastify-swagger@v9.2.0...v9.3.0

v9.2.0

Compare Source

What's Changed

• docs: Fallback to reference description for responses by @​Nelspike in #​826

New Contributors

• @​Nelspike made their first contribution in #​826

Full Changelog: fastify/fastify-swagger@v9.1.0...v9.2.0

v9.1.0

Compare Source

What's Changed

• Fix #​821: incorrect reference when using $ref in patternProperties by @​jldmn in #​822
• feat: support multiple content type schemas per request body by @​vivedo in #​819

New Contributors

• @​jldmn made their first contribution in #​822
• @​vivedo made their first contribution in #​819

Full Changelog: fastify/fastify-swagger@v9.0.1...v9.1.0

v9.0.1

Compare Source

What's Changed

• chore: update fastify to ^5.0.0 by @​Fdawgs in #​820

Full Changelog: fastify/fastify-swagger@v9.0.0...v9.0.1

v9.0.0

Compare Source

What's Changed

• docs(migration): fix broken link by @​Fdawgs in #​779
• chore(.gitignore): add .tap/ dir by @​Fdawgs in #​783
• docs: how to use with @​fastify/autoload by @​bijela-gora in #​789
• Docs: Convert usage example to OpenAPI v3 spec by @​melroy89 in #​792
• Resolve examples for shared schemas by @​vascofg in #​786
• chore(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @​dependabot in #​796
• refactor: json schema draft 7 to openapi schema converting by @​ivan-tymoshenko in #​797
• docs: Using autoloader for swagger is fine by @​jean-michelet in #​802
• chore(deps-dev): bump fluent-json-schema from 4.2.1 to 5.0.0 by @​dependabot in #​806
• Merge next into master by @​jsumners in #​805
• fix (types): changed document type to a discriminating union by @​Bram-dc in #​807
• chore(deps-dev): bump @​types/node from 20.14.13 to 22.0.0 by @​dependabot in #​813
• Fix breaking changes introduced in Fastify v5.0.0-alpha.4 by @​mcollina in #​818

New Contributors

• @​bijela-gora made their first contribution in #​789
• @​melroy89 made their first contribution in #​792
• @​vascofg made their first contribution in #​786
• @​ivan-tymoshenko made their first contribution in #​797
• @​jean-michelet made their first contribution in #​802
• @​Bram-dc made their first contribution in #​807

Full Changelog: fastify/fastify-swagger@v8.14.0...v9.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​fastify/​swagger@​8.15.0 ⏵ 9.6.1	+1

View full report

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

packages/backend/package.json

Package	Version	License	Issue Type
@fastify/swagger	^9.0.0	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/@fastify/swagger	9.6.1	🟢 7.2	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 7 8 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7 Code-Review 🟢 6 Found 14/23 approved changesets -- score normalized to 6 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 9 license file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Security-Policy 🟢 10 security policy file detected SAST 🟢 6 SAST tool is not run on all commits -- score normalized to 6
npm/fastify-plugin	5.1.0	🟢 6.3	Details Check Score Reason Code-Review 🟢 3 Found 8/24 approved changesets -- score normalized to 3 Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Maintained ⚠️ 0 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy 🟢 10 security policy file detected SAST 🟢 8 SAST tool is not run on all commits -- score normalized to 8
npm/json-schema-resolver	3.0.0	🟢 3.8	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Code-Review ⚠️ 0 Found 1/24 approved changesets -- score normalized to 0 Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/@fastify/swagger	^9.0.0	🟢 7.2	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 7 8 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7 Code-Review 🟢 6 Found 14/23 approved changesets -- score normalized to 6 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 9 license file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Security-Policy 🟢 10 security policy file detected SAST 🟢 6 SAST tool is not run on all commits -- score normalized to 6

Scanned Files

• package-lock.json
• packages/backend/package.json

[gander]

✅ Testy przechodzą lokalnie

Wszystkie testy backendowe przechodzą pomyślnie lokalnie (Node.js 22):

• 44 pliki testowe: ✅ PASSED
• 683 testy: ✅ PASSED
• 23 testy pominięte (oczekiwane)

Błędy CI wyglądają na przejściowe problemy środowiskowe. Mergeuję.