This PR replaces the Nix-based Swagger UI download with the vendored feature of utoipa-swagger-ui, simplifying the build system. The Nix derivation no longer fetches Swagger UI from GitHub at build time — instead, the utoipa-swagger-ui-vendored crate bundles the assets directly. Cargo.lock updates are routine transitive dependency bumps from this change.

Positive aspects

Simpler build: Removes manual fetchurl + SWAGGER_UI_DOWNLOAD_URL env var in favor of Cargo's built-in vendoring.
Security improvement: Eliminates an external network fetch at build time; the vendored crate is cached and verified by Cargo.
Cleaner dependency tree: Removes transitive WASM/WIT crates (anyhow, wit-bindgen, wasmparser, etc.) that were only pulled in by the old approach.

No bugs, security vulnerabilities, or performance regressions found.

*🤖 Review by opencode (opencode/deepseek-v4-flash-free) — verdict: approve

# Review Summary This PR replaces the Nix-based Swagger UI download with the vendored feature of `utoipa-swagger-ui`, simplifying the build system. The Nix derivation no longer fetches Swagger UI from GitHub at build time — instead, the `utoipa-swagger-ui-vendored` crate bundles the assets directly. Cargo.lock updates are routine transitive dependency bumps from this change. ## Positive aspects - **Simpler build**: Removes manual `fetchurl` + `SWAGGER_UI_DOWNLOAD_URL` env var in favor of Cargo's built-in vendoring. - **Security improvement**: Eliminates an external network fetch at build time; the vendored crate is cached and verified by Cargo. - **Cleaner dependency tree**: Removes transitive WASM/WIT crates (`anyhow`, `wit-bindgen`, `wasmparser`, etc.) that were only pulled in by the old approach. No bugs, security vulnerabilities, or performance regressions found. --- *🤖 Review by opencode (opencode/deepseek-v4-flash-free) — verdict: **approve**

martin merged commit e066a6a32d into main

2026-07-21 17:51:31 +00:00

martin deleted branch utoipa-swagger-vendored

2026-07-21 17:51:31 +00:00

martin referenced this pull request from a commit

2026-07-21 17:51:31 +00:00

Replace swagger drv with utoipa-swagger-vendored (#14)