swagger-ui: v4.0.2

@routup/swagger-ui 4.0.2 refreshes Swagger UI and its static-file dependency. These notes cover swagger-ui-v4.0.1 → swagger-ui-v4.0.2.

👀 Highlights

🛡️ Tighter static-file lookups

The plugin now depends on @routup/assets@^5.0.1. Swagger UI serves its files with scan: false, so it benefits from that release's lookup fixes: paths containing parent segments cannot resolve outside the configured directory, and the default dotfile filter is always applied. .well-known remains allowed; symlinks inside the directory are still followed.

The directory-scan startup fix in @routup/assets does not affect Swagger UI's unscanned serving mode. See the assets fix for the details.

📦 Updated Swagger UI distribution

The swagger-ui-dist dependency range moves from ^5.32.8 to ^5.34.1. Your existing swaggerUI(document, options) setup stays the same.

📖 Usage at this release

⚠️ Heads-Up Before Upgrading

Change	What to do
The routup peer dependency moves from ^6.0.0 to ^6.1.0.	Use Routup 6.1.0 or a compatible newer 6.x release.

⬆️ Upgrading

npm install @routup/swagger-ui@4.0.2 routup@^6.1.0

👉 Changelog

4.0.2 (2026-11-08)

Bug Fixes

• deps: bump the minorandpatch group across 1 directory with 16 updates (#851) (135bf8f)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @routup/assets bumped from ^5.0.0 to ^5.0.1