chore(deps): hold openapi-typescript-codegen below 0.30

0.30 moved to json-schema-ref-parser 14, whose safe URL resolver
refuses localhost, so `npm run generate` failed in the api-types check.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

frontend/package-lock.json

@@ -60,7 +60,7 @@
         "eslint-plugin-vuejs-accessibility": "^2.5.0",
         "globals": "^17.0.0",
         "happy-dom": "^20.9.0",
-        "openapi-typescript-codegen": "^0.31.0",
+        "openapi-typescript-codegen": "^0.29.0",
         "postcss": "^8.5.23",
         "storybook": "^10.2.19",
         "tsx": "^4.21.0",
@@ -86,22 +86,21 @@
       "license": "MIT"
     },
     "node_modules/@apidevtools/json-schema-ref-parser": {
-      "version": "14.2.1",
-      "resolved": "https://registry.npmjs.org/@apidevtools/json-schema-ref-parser/-/json-schema-ref-parser-14.2.1.tgz",
-      "integrity": "sha512-HmdFw9CDYqM6B25pqGBpNeLCKvGPlIx1EbLrVL0zPvj50CJQUHyBNBw45Muk0kEIkogo1VZvOKHajdMuAzSxRg==",
+      "version": "11.9.3",
+      "resolved": "https://registry.npmjs.org/@apidevtools/json-schema-ref-parser/-/json-schema-ref-parser-11.9.3.tgz",
+      "integrity": "sha512-60vepv88RwcJtSHrD6MjIL6Ta3SOYbgfnkHb+ppAVK+o9mXprRtulx7VlRl3lN3bbvysAfCS7WMVfhUYemB0IQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
+        "@jsdevtools/ono": "^7.1.3",
+        "@types/json-schema": "^7.0.15",
         "js-yaml": "^4.1.0"
       },
       "engines": {
-        "node": ">= 20"
+        "node": ">= 16"
       },
       "funding": {
         "url": "https://github.com/sponsors/philsturgeon"
-      },
-      "peerDependencies": {
-        "@types/json-schema": "^7.0.15"
       }
     },
     "node_modules/@babel/code-frame": {
@@ -2891,6 +2890,13 @@
         "@jridgewell/sourcemap-codec": "^1.4.14"
       }
     },
+    "node_modules/@jsdevtools/ono": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/@jsdevtools/ono/-/ono-7.1.3.tgz",
+      "integrity": "sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@lezer/common": {
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/@lezer/common/-/common-1.5.1.tgz",
@@ -7284,13 +7290,13 @@
       }
     },
     "node_modules/commander": {
-      "version": "14.0.3",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz",
-      "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==",
+      "version": "12.1.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz",
+      "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=20"
+        "node": ">=18"
       }
     },
     "node_modules/comment-parser": {
@@ -10898,17 +10904,17 @@
       }
     },
     "node_modules/openapi-typescript-codegen": {
-      "version": "0.31.0",
-      "resolved": "https://registry.npmjs.org/openapi-typescript-codegen/-/openapi-typescript-codegen-0.31.0.tgz",
-      "integrity": "sha512-ph3njJ7veDXy6QKLKHqNiyIqWMMu+rcdtU87XuwBo+QfBOpE1PvqzIWY3KMZBnLaoACxhtrEPf5re7Y/Ty9Bnw==",
+      "version": "0.29.0",
+      "resolved": "https://registry.npmjs.org/openapi-typescript-codegen/-/openapi-typescript-codegen-0.29.0.tgz",
+      "integrity": "sha512-/wC42PkD0LGjDTEULa/XiWQbv4E9NwLjwLjsaJ/62yOsoYhwvmBR31kPttn1DzQ2OlGe5stACcF/EIkZk43M6w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@apidevtools/json-schema-ref-parser": "^14.2.1",
+        "@apidevtools/json-schema-ref-parser": "^11.5.4",
         "camelcase": "^6.3.0",
-        "commander": "^14.0.3",
-        "fs-extra": "^11.3.5",
-        "handlebars": "^4.7.9"
+        "commander": "^12.0.0",
+        "fs-extra": "^11.2.0",
+        "handlebars": "^4.7.8"
       },
       "bin": {
         "openapi": "bin/index.js"

frontend/package.json

@@ -90,7 +90,7 @@
     "eslint-plugin-vuejs-accessibility": "^2.5.0",
     "globals": "^17.0.0",
     "happy-dom": "^20.9.0",
-    "openapi-typescript-codegen": "^0.31.0",
+    "openapi-typescript-codegen": "^0.29.0",
     "postcss": "^8.5.23",
     "storybook": "^10.2.19",
     "tsx": "^4.21.0",

renovate.json

@@ -31,6 +31,12 @@
       "matchPackageNames": ["typescript"],
       "allowedVersions": "<7"
     },
+    {
+      "description": "From 0.30, json-schema-ref-parser 14 refuses localhost URLs, so `npm run generate` can't read the schema from the local backend. The CLI has no flag to allow them.",
+      "matchManagers": ["npm"],
+      "matchPackageNames": ["openapi-typescript-codegen"],
+      "allowedVersions": "<0.30"
+    },
     {
       "matchDatasources": ["docker"],
       "matchPackageNames": ["postgres"],