chore: update fastify, @fastify/cookie, @fastify/helmet, @fastify/rate-limit, @fastify/swagger, @fastify/swagger-ui to latest

[jaredwray]

Please check if the PR fulfills these requirements

• Followed the Contributing and Code of Conduct guidelines.
• Tests for the changes have been added (for bug fixes/features) with 100% code coverage. — N/A (dependency-only change); the existing suite (473 tests) passes and coverage is unchanged.

What kind of change does this PR introduce?

Chore — dependency maintenance for the Fastify stack (core framework + first-party plugins). No source code changes.

---

Updates — minor/patch (within existing semver ranges)

Package	From	To
fastify	5.8.5	5.10.0
@fastify/cookie	11.0.2	11.1.1
@fastify/helmet	13.0.2	13.1.0
@fastify/rate-limit	11.0.0	11.1.0
@fastify/swagger	9.7.0	9.8.0
@fastify/swagger-ui	6.0.0	6.1.0

All stay within the existing caret ranges — no major boundaries crossed. Some newer releases (e.g. @fastify/cookie 11.1.2, @fastify/swagger 9.8.1) were intentionally held back by the repo's minimumReleaseAge (7-day) policy in pnpm-workspace.yaml.

Verification

• Build: Passed
• Lint (Biome) + tests (Vitest w/ coverage): Passed
• 473 tests across 43 files; coverage unchanged (100% lines/functions)

Context — grouped maintenance series

This is the first of several per-family dependency PRs, opened one at a time. Remaining groups to follow after this merges:

• Build/dev tooling — @biomejs/biome, @swc/core, tsx
• @scalar/api-reference
• hookified
• @fastify/static v10 (major)

typescript 7.0.2 is intentionally deferred — the build toolchain flags TS 7 as experimental with an unstable API, and it is exact-pinned, so it warrants its own deliberate upgrade.

---

Automated by the project-maintenance skill.

---

Generated by Claude Code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​fastify/​helmet@​13.1.0
	@​fastify/​swagger@​9.8.0
	@​fastify/​rate-limit@​11.1.0
	@​fastify/​cookie@​11.1.1
	@​fastify/​swagger-ui@​6.1.0
	fastify@​5.10.0

View full report

[gemini-code-assist]

Code Review

This pull request updates several Fastify-related dependencies in package.json, including @fastify/cookie, @fastify/helmet, @fastify/rate-limit, @fastify/swagger, @fastify/swagger-ui, and fastify, along with their corresponding lockfile entries in pnpm-lock.yaml. No review comments were provided, and there is no additional feedback to address.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (a3543b0) to head (62d073a).

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #174   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           41        41           
  Lines         1310      1310           
  Branches       259       259           
=========================================
  Hits          1310      1310           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.