1030 feature request update mongoose multer and swagger dependencies to address security vulnerabilities

[tickBit]

Brief description

Related issue #1030

Updates Mongoose, NestJS Platform Express, Multer, and NestJS Swagger dependencies to address reported security vulnerabilities.

The Mongoose upgrade required adjustments to the shared database service typings due to stricter generic types introduced in Mongoose 8.24. Referenced room IDs were also updated to support both string identifiers and populated Room values. No database migration is required.

Change list

• Updated mongoose from 8.19.4 to 8.24.4.
• Updated @nestjs/platform-express from 11.1.27 to 11.2.6.
• Updated the transitive multer dependency from 2.1.1 to 2.4.0.
• Updated @types/multer from 2.0.0 to 2.3.0.
• Updated @nestjs/swagger from 11.4.4 to 11.4.7 to address transitive js-yaml findings.
• Updated BasicService and IService generic typings for Mongoose 8.24 compatibility.
• Updated bulkWrite typing to support Mongoose 8.24’s stricter operation types.
• Replaced several any defaults with model-derived document and update types.
• Updated room_id typing to accept string IDs and populated Room values.
• Kept the stored room_id schema type as MongoDB ObjectId; no database migration is needed.
• Verified the changes with the TypeScript build/type check.

Testing

Locally all the 310 test suites passed:

Basic testing also was done with Postman

• log in user
• get profile
• get clan

Those worked as usual.

[codecov-alt]

Codecov Report

❌ Patch coverage is 91.66667% with 1 line in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
src/common/service/basicService/BasicService.ts	91.66%	1 Missing ⚠️

Files with missing lines	Coverage Δ
src/common/service/basicService/BasicService.ts	81.41% <91.66%> (+0.16%)	⬆️

... and 3 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[CapoMK25]

Should be clean to go, approved!