chore(deps): update npm dependencies

[deniswsrosa]

Summary

• Updates swagger-ui-express from ^4.6.3 to ^5.0.1.
• Updates dev tooling env-cmd from ^10.1.0 to ^11.0.0 and jest from ^29.7.0 to ^30.4.2.
• Regenerates package-lock.json with npm using the repository's existing npm workflow.

Hermes Kanban task: t_a595eb43

Updated dependencies

Ecosystem	Dependency	Previous	Updated	Type	Notes
npm	swagger-ui-express	^4.6.3	^5.0.1	production	Major update; app Swagger UI smoke-tested in browser.
npm	env-cmd	^10.1.0	^11.0.0	dev	Major update; npm test verified env-cmd -f ./config/test.env still loads env file. Requires Node >=20.10.0, compatible with repo engine 20.x and validation Node v20.20.2.
npm	jest	^29.7.0	^30.4.2	dev	Major update; full Jest suite passed.

Validation

All commands were run locally with Node v20.20.2 / npm 10.8.2 against a local Couchbase Server container with the travel-sample bucket.

npm outdated --include=dev --json
npm install
npm test
npm run build
DB_CONN_STR=couchbase://127.0.0.1 DB_USERNAME=Administrator DB_PASSWORD=*** DB_BUCKET_NAME=travel-sample APP_PORT=3000 DELAY=1000 npm run testGA
npm start
curl -sS -o /tmp/ottoman_airport_response.json -w '%{http_code}\n' 'http://localhost:3000/api/v1/airport/list?country=France&limit=1&offset=0'

Check	Outcome
npm install	Passed; lockfile regenerated.
npm test	Passed: 17 suites / 17 tests.
npm run build	Passed: Babel compiled 13 files.
npm run testGA	Passed: 17 suites / 17 tests.
Browser evidence	Passed: Swagger UI rendered at http://localhost:3000/swagger-ui/.
API evidence	Passed: GET /api/v1/airport/list?country=France&limit=1&offset=0 returned HTTP 200 with sample airport JSON (Calais, France, CQF).

Evidence artifacts

Screenshots were captured locally for the Hermes task:

Artifact	Description
/home/ubuntu/.hermes/kanban/boards/couchbase-examples/workspaces/t_a595eb43/evidence/swagger-ui.png	Browser screenshot of Swagger UI running from the updated app.
/home/ubuntu/.hermes/kanban/boards/couchbase-examples/workspaces/t_a595eb43/evidence/api-airport-list-json.png	Browser screenshot of live JSON response from the airport list endpoint.
/home/ubuntu/.hermes/kanban/boards/couchbase-examples/workspaces/t_a595eb43/evidence/evidence-manifest.json	Local evidence manifest with endpoint and screenshot details.

Risk notes / skipped dependencies

• This PR intentionally duplicates the dependency versions from the open Dependabot PRs per dashboard instruction on Hermes task t_a595eb43.
• @babel/runtime / Babel 8 remains skipped because Babel 8.0.0 requires Node ^22.18.0 || >=24.11.0, which conflicts with this repository's node: 20.x engine.
• npm audit --omit=dev still reports an existing high-severity transitive issue through ottoman/jsonpath/underscore; npm's suggested fix downgrades ottoman to 1.0.2 and is not a safe conservative dependency update for this quickstart.
• Existing npm audit fix --force was not run.

Rollback

Revert this PR to restore the previous package.json and package-lock.json dependency set.

[gemini-code-assist]

Code Review

This pull request updates several dependencies in package.json, including swagger-ui-express, env-cmd, and jest. The review feedback highlights a potential compatibility issue where the upgraded env-cmd version drops support for Node.js versions below 20.10.0, which conflicts with the existing engines.node configuration of "20.x". It is recommended to update the Node engine requirements to prevent installation or runtime issues.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The update of env-cmd to ^11.0.0 drops support for Node.js versions below 20.10.0 [4.2.1]. However, the engines.node field in package.json is currently configured as "20.x", which includes Node.js versions 20.0.0 through 20.9.0. This mismatch can lead to installation warnings or runtime failures on older Node.js 20 releases. Please update the engines.node field in package.json to reflect this new requirement, for example: "node": ">=20.10.0 <21".