From c61814fa231f0f14915d087775e1c5f1e554d27f Mon Sep 17 00:00:00 2001
From: Daniel Volz <mail@danielvolz.org>
Date: Fri, 19 Dec 2025 14:05:03 +0100
Subject: [PATCH] Update helmet for Fastify 5

---
 backend/package.json |  2 +-
 package-lock.json    | 36 ++++++++++++++++++++----------------
 2 files changed, 21 insertions(+), 17 deletions(-)

diff --git a/backend/package.json b/backend/package.json
index 711d452..17180ff 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -13,7 +13,7 @@
   "dependencies": {
     "@fastify/cookie": "^10.0.1",
     "@fastify/cors": "^10.0.1",
-    "@fastify/helmet": "^11.1.1",
+    "@fastify/helmet": "^13.0.2",
     "@fastify/jwt": "^10.0.0",
     "@fastify/rate-limit": "^10.1.0",
     "@fastify/sensible": "^6.0.4",
diff --git a/package-lock.json b/package-lock.json
index 9573d1d..e1d7a7d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,7 +18,7 @@
       "dependencies": {
         "@fastify/cookie": "^10.0.1",
         "@fastify/cors": "^10.0.1",
-        "@fastify/helmet": "^11.1.1",
+        "@fastify/helmet": "^13.0.2",
         "@fastify/jwt": "^10.0.0",
         "@fastify/rate-limit": "^10.1.0",
         "@fastify/sensible": "^6.0.4",
@@ -879,21 +879,25 @@
       "license": "MIT"
     },
     "node_modules/@fastify/helmet": {
-      "version": "11.1.1",
-      "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-11.1.1.tgz",
-      "integrity": "sha512-pjJxjk6SLEimITWadtYIXt6wBMfFC1I6OQyH/jYVCqSAn36sgAIFjeNiibHtifjCd+e25442pObis3Rjtame6A==",
+      "version": "13.0.2",
+      "resolved": "https://registry.npmjs.org/@fastify/helmet/-/helmet-13.0.2.tgz",
+      "integrity": "sha512-tO1QMkOfNeCt9l4sG/FiWErH4QMm+RjHzbMTrgew1DYOQ2vb/6M1G2iNABBrD7Xq6dUk+HLzWW8u+rmmhQHifA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
       "license": "MIT",
       "dependencies": {
-        "fastify-plugin": "^4.2.1",
-        "helmet": "^7.0.0"
+        "fastify-plugin": "^5.0.0",
+        "helmet": "^8.0.0"
       }
     },
-    "node_modules/@fastify/helmet/node_modules/fastify-plugin": {
-      "version": "4.5.1",
-      "resolved": "https://registry.npmjs.org/fastify-plugin/-/fastify-plugin-4.5.1.tgz",
-      "integrity": "sha512-stRHYGeuqpEZTL1Ef0Ovr2ltazUT9g844X5z/zEBFLG8RYlpDiOCIG+ATvYEp+/zmc7sN29mcIMp8gvYplYPIQ==",
-      "license": "MIT"
-    },
     "node_modules/@fastify/jwt": {
       "version": "10.0.0",
       "resolved": "https://registry.npmjs.org/@fastify/jwt/-/jwt-10.0.0.tgz",
@@ -2412,12 +2416,12 @@
       }
     },
     "node_modules/helmet": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/helmet/-/helmet-7.2.0.tgz",
-      "integrity": "sha512-ZRiwvN089JfMXokizgqEPXsl2Guk094yExfoDXR0cBYWxtBbaSww/w+vT4WEJsBW2iTUi1GgZ6swmoug3Oy4Xw==",
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
+      "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
       "license": "MIT",
       "engines": {
-        "node": ">=16.0.0"
+        "node": ">=18.0.0"
       }
     },
     "node_modules/http-errors": {