[dependabot]

Bumps openapi-backend from 5.23.0 to 5.24.0.

Release notes

Sourced from openapi-backend's releases.

5.24.0

This release adds a test client for APIs built with openapi-backend, available from openapi-backend/testing.

Added

• createTestClient() in openapi-backend/testing builds requests from your API definition, with one method per operationId, plus client.call() and client.with() for raw requests and request defaults. It can build requests from examples in the definition, with overrides merged in. It can send requests to Express, Koa or Node listeners, Fastify or Hapi inject(), fetch apps, AWS Lambda handlers, running servers or custom adapters. Responses are checked against the definition and throw ResponseValidationError on a mismatch. Operation methods throw RoutingError if the request they build is routed to a different operation. res.context exposes the context openapi-backend built, and security stubs can replace security handler results per request (#1048)
• OpenAPIValidator.compileSchema() is now public (#1048)

Dependencies

• Lockfile and development dependency updates (#1041, #1045, #1031, #1032, #1035, #1036)

---

Full changelog: openapistack/openapi-backend@5.23.0...5.24.0 npm: https://www.npmjs.com/package/openapi-backend/v/5.24.0

The CycloneDX SBOMs, license listings and third-party notices for this release are attached below. To check that the npm package was built from this tag, see Verifying a release.

Changelog

Sourced from openapi-backend's changelog.

5.24.0 - 2026-11-09

This release adds a test client for APIs built with openapi-backend, available from openapi-backend/testing.

Added

• createTestClient() in openapi-backend/testing builds requests from your API definition, with one method per operationId, plus client.call() and client.with() for raw requests and request defaults. It can build requests from examples in the definition, with overrides merged in. It can send requests to Express, Koa or Node listeners, Fastify or Hapi inject(), fetch apps, AWS Lambda handlers, running servers or custom adapters. Responses are checked against the definition and throw ResponseValidationError on a mismatch. Operation methods throw RoutingError if the request they build is routed to a different operation. res.context exposes the context openapi-backend built, and security stubs can replace security handler results per request (#1048)
• OpenAPIValidator.compileSchema() is now public (#1048)

Dependencies

• Lockfile and development dependency updates (#1041, #1045, #1031, #1032, #1035, #1036)

Commits

• a7523d1 5.24.0
• edf95a4 chore: update SBOM and third party notices
• 257dfe7 Add createTestClient() test client (openapi-backend/testing) (#1048)
• a1d6ede chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 (#1032)
• f3bdd00 chore(deps): bump undici from 8.10.2 to 8.12.3 (#1041)
• 17d46e2 chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1031)
• 8770f18 chore(deps): bump github/codeql-action/autobuild from 4.38.3 to 4.39.0 (#1035)
• bb4cca3 chore(deps): bump github/codeql-action/analyze from 4.38.3 to 4.39.0 (#1036)
• 0b80d58 chore(deps): bump qs from 6.16.0 to 6.16.1 (#1045)
• 89c3866 chore: changelog for 5.23.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)