fix(deps): update dependency @fastify/swagger to v9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@fastify/swagger	^8.15.0 → ^9.0.0

---

Release Notes

fastify/fastify-swagger (@​fastify/swagger)

v9.6.1

Compare Source

What's Changed

• Fix convertConstToEnum type typo by @​TastyPi in #​901

Full Changelog: fastify/fastify-swagger@v9.6.0...v9.6.1

v9.6.0

Compare Source

What's Changed

• ci(ci): add concurrency config by @​Fdawgs in #​898
• chore(deps-dev): bump joi-to-json from 4.3.2 to 5.0.0 by @​dependabot[bot] in #​900
• chore(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​899
• Support not converting const to enum by @​TastyPi in #​877

New Contributors

• @​TastyPi made their first contribution in #​877

Full Changelog: fastify/fastify-swagger@v9.5.2...v9.6.0

v9.5.2

Compare Source

What's Changed

• chore(ci): fix node 24 tests by @​rozzilla in #​873
• refactor: remove unused done function by @​inyourtime in #​874
• docs: use cross-platform compatible info emoji by @​Fdawgs in #​875
• chore(license): update date ranges; standardise style by @​Fdawgs in #​880
• chore: remove .taprc file by @​Tony133 in #​884
• fix: ignore typing Tests by @​Uzlopak in #​883
• chore(deps-dev): bump @​apidevtools/swagger-parser from 10.1.1 to 12.0.0 by @​dependabot[bot] in #​885
• chore(deps-dev): bump @​types/node from 22.15.34 to 24.0.8 by @​dependabot[bot] in #​886
• docs: add note on @​fastify/swagger registration order by @​RemyMachado in #​891
• docs(readme): fix note style by @​Fdawgs in #​892
• Remove redundant check by @​fedyk in #​895
• chore(.npmrc): ignore scripts by @​Fdawgs in #​896
• build(deps-dev): remove @​fastify/pre-commit by @​Fdawgs in #​897
• fix: remove defs when ref already defined in schema by @​cyky in #​888

New Contributors

• @​Tony133 made their first contribution in #​884
• @​RemyMachado made their first contribution in #​891
• @​fedyk made their first contribution in #​895
• @​cyky made their first contribution in #​888

Full Changelog: fastify/fastify-swagger@v9.5.1...v9.5.2

v9.5.1

Compare Source

What's Changed

• chore(deps-dev): bump fluent-json-schema from 5.0.0 to 6.0.0 by @​dependabot in #​869
• chore(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @​dependabot in #​870
• fix: prevent mutation of response headers schema by @​inyourtime in #​871
• fix(types): fix route config options by @​inyourtime in #​867

New Contributors

• @​inyourtime made their first contribution in #​871

Full Changelog: fastify/fastify-swagger@v9.5.0...v9.5.1

v9.5.0

Compare Source

• fix: added transform types to export (#​866)
• docs(readme): update plugin version syntax (#​862)
• docs(readme): update link for fastify-api-reference integration (#​859)
• docs(readme): remove references to the old included ui
• docs(readme): conciseness improvements (#​857)

v9.4.2

Compare Source

What's Changed

• build(dependabot): reduce npm updates to monthly by @​Fdawgs in #​855
• fix: bump json-schema-resolver by @​Eomm in #​856

Full Changelog: fastify/fastify-swagger@v9.4.1...v9.4.2

v9.4.1

Compare Source

What's Changed

• docs(readme): update ci badge syntax by @​Fdawgs in #​841
• build(deps-dev): replace standard with neostandard by @​Fdawgs in #​842
• chore(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @​dependabot in #​844
• build(deps-dev): add eslint, peer dep of neostandard by @​Fdawgs in #​845
• chore(package): add funding by @​Fdawgs in #​846
• test: remove unused params by @​Fdawgs in #​847
• refactor: prefix unused params with underscores by @​Fdawgs in #​848
• refactor(lib/util/read-package-json): remove unused catch binding by @​Fdawgs in #​849
• test: migrate from tap to node:test and c8 by @​R-Campbell in #​843
• perf: use optional chaining by @​Fdawgs in #​850
• fix(types): fix plugin options by @​Uzlopak in #​851
• perf(lib): replace accumulator spread with object.assign by @​Fdawgs in #​852
• docs(readme): spelling and grammar fixes by @​Fdawgs in #​853

Full Changelog: fastify/fastify-swagger@v9.4.0...v9.4.1

v9.4.0

Compare Source

What's Changed

• ci(ci): rename ci workflow by @​Fdawgs in #​840
• feat: Add custom decorator support by @​R-Campbell in #​837

Full Changelog: fastify/fastify-swagger@v9.3.0...v9.4.0

v9.3.0

Compare Source

What's Changed

• chore(deps-dev): bump @​fastify/cookie from 10.0.1 to 11.0.1 by @​dependabot in #​827
• docs: Adding Fastify 5 Compatibilty Row by @​smrrazavian in #​828
• feat(openapi): add support for callbacks by @​ThomasFlorelli in #​829
• refactor(test/spec/openapi/option): use Object.hasOwn() by @​Fdawgs in #​831
• fix: soft fail fallback response description lookups by @​samchungy in #​832
• chore(deps): bump fastify/workflows from 5.0.0 to 5.0.1 by @​dependabot in #​833
• docs(readme): standardize compatibility table style by @​Fdawgs in #​834
• style: remove trailing whitespace by @​Fdawgs in #​835
• fix(openapi): support full callbacks spec by @​R-Campbell in #​838

New Contributors

• @​smrrazavian made their first contribution in #​828
• @​ThomasFlorelli made their first contribution in #​829
• @​R-Campbell made their first contribution in #​838

Full Changelog: fastify/fastify-swagger@v9.2.0...v9.3.0

v9.2.0

Compare Source

What's Changed

• docs: Fallback to reference description for responses by @​Nelspike in #​826

New Contributors

• @​Nelspike made their first contribution in #​826

Full Changelog: fastify/fastify-swagger@v9.1.0...v9.2.0

v9.1.0

Compare Source

What's Changed

• Fix #​821: incorrect reference when using $ref in patternProperties by @​jldmn in #​822
• feat: support multiple content type schemas per request body by @​vivedo in #​819

New Contributors

• @​jldmn made their first contribution in #​822
• @​vivedo made their first contribution in #​819

Full Changelog: fastify/fastify-swagger@v9.0.1...v9.1.0

v9.0.1

Compare Source

What's Changed

• chore: update fastify to ^5.0.0 by @​Fdawgs in #​820

Full Changelog: fastify/fastify-swagger@v9.0.0...v9.0.1

v9.0.0

Compare Source

What's Changed

• docs(migration): fix broken link by @​Fdawgs in #​779
• chore(.gitignore): add .tap/ dir by @​Fdawgs in #​783
• docs: how to use with @​fastify/autoload by @​bijela-gora in #​789
• Docs: Convert usage example to OpenAPI v3 spec by @​melroy89 in #​792
• Resolve examples for shared schemas by @​vascofg in #​786
• chore(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @​dependabot in #​796
• refactor: json schema draft 7 to openapi schema converting by @​ivan-tymoshenko in #​797
• docs: Using autoloader for swagger is fine by @​jean-michelet in #​802
• chore(deps-dev): bump fluent-json-schema from 4.2.1 to 5.0.0 by @​dependabot in #​806
• Merge next into master by @​jsumners in #​805
• fix (types): changed document type to a discriminating union by @​Bram-dc in #​807
• chore(deps-dev): bump @​types/node from 20.14.13 to 22.0.0 by @​dependabot in #​813
• Fix breaking changes introduced in Fastify v5.0.0-alpha.4 by @​mcollina in #​818

New Contributors

• @​bijela-gora made their first contribution in #​789
• @​melroy89 made their first contribution in #​792
• @​vascofg made their first contribution in #​786
• @​ivan-tymoshenko made their first contribution in #​797
• @​jean-michelet made their first contribution in #​802
• @​Bram-dc made their first contribution in #​807

Full Changelog: fastify/fastify-swagger@v8.14.0...v9.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 4 package(s) with unknown licenses.

See the Details below.

License Issues

package-lock.json

Package	Version	License	Issue Type
packages/backend	0.1.24	Null	Unknown License
packages/frontend	0.1.22	Null	Unknown License
packages/shared	0.1.11	Null	Unknown License

packages/backend/package.json

Package	Version	License	Issue Type
@fastify/swagger	^9.0.0	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/@fastify/swagger	9.6.1	🟢 7.2	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 7 8 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7 Code-Review 🟢 6 Found 14/23 approved changesets -- score normalized to 6 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 9 license file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Security-Policy 🟢 10 security policy file detected SAST 🟢 6 SAST tool is not run on all commits -- score normalized to 6
npm/fastify-plugin	5.1.0	🟢 6.3	Details Check Score Reason Code-Review 🟢 3 Found 8/24 approved changesets -- score normalized to 3 Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Maintained ⚠️ 0 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy 🟢 10 security policy file detected SAST 🟢 8 SAST tool is not run on all commits -- score normalized to 8
npm/json-schema-resolver	3.0.0	🟢 3.8	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Code-Review ⚠️ 0 Found 1/24 approved changesets -- score normalized to 0 Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/packages/backend	0.1.24	Unknown	Unknown
npm/packages/frontend	0.1.22	Unknown	Unknown
npm/packages/shared	0.1.11	Unknown	Unknown
npm/@fastify/swagger	^9.0.0	🟢 7.2	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 7 8 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7 Code-Review 🟢 6 Found 14/23 approved changesets -- score normalized to 6 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 9 license file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Vulnerabilities 🟢 10 0 existing vulnerabilities detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Security-Policy 🟢 10 security policy file detected SAST 🟢 6 SAST tool is not run on all commits -- score normalized to 6

Scanned Files

• package-lock.json
• packages/backend/package.json

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​fastify/​swagger@​8.15.0 ⏵ 9.6.1	+1
	@​gander-tools/​diff-voyager-shared@​0.1.10 ⏵ 0.1.11

View full report

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 9.x releases. But if you manually upgrade to 9.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.