Bump express from 4.21.0 to 5.0.1#87

Bumps [express](https://github.com/expressjs/express) from 4.21.0 to 5.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/releases">express's releases</a>.</em></p> <blockquote> <h2>5.0.1</h2> <h2>What's Changed</h2> <ul> <li>remove --bail from test script by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5962">expressjs/express#5962</a></li> <li>Nominate <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> to the triage team by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6009">expressjs/express#6009</a></li> <li>Link and update captains by <a href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6013">expressjs/express#6013</a></li> <li>Update <code>cookie</code> semver lock to address CVE-2024-47764 by <a href="https://github.com/joshbuker"><code>@​joshbuker</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6017">expressjs/express#6017</a></li> <li>Release: 5.0.1 by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/6032">expressjs/express#6032</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/expressjs/express/compare/v5.0.0...5.0.1">https://github.com/expressjs/express/compare/v5.0.0...5.0.1</a></p> <h2>5.0.0</h2> <h2>What's Changed</h2> <ul> <li>4.19.2 Staging by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5561">expressjs/express#5561</a></li> <li>remove duplicate location test for data uri by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5562">expressjs/express#5562</a></li> <li>feat: document beta releases expectations by <a href="https://github.com/marco-ippolito"><code>@​marco-ippolito</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5565">expressjs/express#5565</a></li> <li>Cut down on duplicated CI runs by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5564">expressjs/express#5564</a></li> <li>Add a Threat Model by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5526">expressjs/express#5526</a></li> <li>Assign captain of encodeurl by <a href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5579">expressjs/express#5579</a></li> <li>Nominate jonchurch as repo captain for <code>http-errors</code>, <code>expressjs.com</code>, <code>morgan</code>, <code>cors</code>, <code>body-parser</code> by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5587">expressjs/express#5587</a></li> <li>docs: update Security.md by <a href="https://github.com/inigomarquinez"><code>@​inigomarquinez</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5590">expressjs/express#5590</a></li> <li>docs: update triage nomination policy by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5600">expressjs/express#5600</a></li> <li>Add CodeQL (SAST) by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5433">expressjs/express#5433</a></li> <li>docs: add UlisesGascon as triage initiative captain by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5605">expressjs/express#5605</a></li> <li>Use object with null prototype for various app properties by <a href="https://github.com/EvanHahn"><code>@​EvanHahn</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/4861">expressjs/express#4861</a></li> <li>deps: encodeurl@~2.0.0 by <a href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5569">expressjs/express#5569</a></li> <li>skip QUERY method test by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5628">expressjs/express#5628</a></li> <li>ignore ETAG query test on 21 and 22, reuse skip util by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5639">expressjs/express#5639</a></li> <li>add support Node.js@22 in the CI by <a href="https://github.com/mertcanaltin"><code>@​mertcanaltin</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5627">expressjs/express#5627</a></li> <li>doc: add table of contents, tc/triager lists to readme by <a href="https://github.com/mertcanaltin"><code>@​mertcanaltin</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5619">expressjs/express#5619</a></li> <li>List and sort all projects, add captains by <a href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5653">expressjs/express#5653</a></li> <li>Call callback once on listen error by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/3216">expressjs/express#3216</a></li> <li>docs: add <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> as captain for cookie-parser by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5666">expressjs/express#5666</a></li> <li>✨ bring back query tests for node 21 by <a href="https://github.com/ctcpip"><code>@​ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5690">expressjs/express#5690</a></li> <li>[v4] Deprecate <code>res.clearCookie</code> accepting <code>options.maxAge</code> and <code>options.expires</code> by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5672">expressjs/express#5672</a></li> <li>skip QUERY tests for Node 21 only, still not supported by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5695">expressjs/express#5695</a></li> <li>📝 update people, add ctcpip to TC by <a href="https://github.com/ctcpip"><code>@​ctcpip</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5683">expressjs/express#5683</a></li> <li>remove minor version pinning from ci by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5722">expressjs/express#5722</a></li> <li>Fix link variable use in attribution section of CODE OF CONDUCT by <a href="https://github.com/IamLizu"><code>@​IamLizu</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5762">expressjs/express#5762</a></li> <li>Replace Appveyor windows testing with GHA by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5599">expressjs/express#5599</a></li> <li>Add OSSF Scorecard badge by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5436">expressjs/express#5436</a></li> <li>Throw on invalid status codes by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/4212">expressjs/express#4212</a></li> <li>Use Array.flat instead of array-flatten by <a href="https://github.com/almic"><code>@​almic</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5677">expressjs/express#5677</a></li> <li>Adopt Node@18 as the minimum supported version by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5803">expressjs/express#5803</a></li> <li>Ignore <code>expires</code> and <code>maxAge</code> in <code>res.clearCookie()</code> by <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5792">expressjs/express#5792</a></li> <li>[email protected] by <a href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5786">expressjs/express#5786</a></li> <li>chore: upgrade <code>debug</code> dep from 3.10 to 4.3.6 by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5829">expressjs/express#5829</a></li> <li>refactor: replace 'path-is-absolute' dep with node:path isAbsolute method by <a href="https://github.com/carpasse"><code>@​carpasse</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5830">expressjs/express#5830</a></li> <li>update scorecard link by <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5814">expressjs/express#5814</a></li> <li>Nominate <a href="https://github.com/IamLizu"><code>@​IamLizu</code></a> to the triage team by <a href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a> in <a href="https://redirect.github.com/expressjs/express/pull/5836">expressjs/express#5836</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/expressjs/express/blob/master/History.md">express's changelog</a>.</em></p> <blockquote> <h1>5.0.1 / 2024-10-08</h1> <ul> <li>Update <code>cookie</code> semver lock to address <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li> </ul> <h1>5.0.0 / 2024-09-10</h1> <ul> <li>remove: <ul> <li><code>path-is-absolute</code> dependency - use <code>path.isAbsolute</code> instead</li> </ul> </li> <li>breaking: <ul> <li><code>res.status()</code> accepts only integers, and input must be greater than 99 and less than 1000 <ul> <li>will throw a <code>RangeError: Invalid status code: ${code}. Status code must be greater than 99 and less than 1000.</code> for inputs outside this range</li> <li>will throw a <code>TypeError: Invalid status code: ${code}. Status code must be an integer.</code> for non integer inputs</li> </ul> </li> <li>deps: [email protected]</li> <li><code>res.redirect('back')</code> and <code>res.location('back')</code> is no longer a supported magic string, explicitly use <code>req.get('Referrer') || '/'</code>.</li> </ul> </li> <li>change: <ul> <li><code>res.clearCookie</code> will ignore user provided <code>maxAge</code> and <code>expires</code> options</li> </ul> </li> <li>deps: cookie-signature@^1.2.1</li> <li>deps: [email protected]</li> <li>deps: merge-descriptors@^2.0.0</li> <li>deps: serve-static@^2.1.0</li> <li>deps: [email protected]</li> <li>deps: accepts@^2.0.0</li> <li>deps: mime-types@^3.0.0 <ul> <li><code>application/javascript</code> =&gt; <code>text/javascript</code></li> </ul> </li> <li>deps: type-is@^2.0.0</li> <li>deps: content-disposition@^1.0.0</li> <li>deps: finalhandler@^2.0.0</li> <li>deps: fresh@^2.0.0</li> <li>deps: body-parser@^2.0.1</li> <li>deps: send@^1.1.0</li> </ul> <h1>5.0.0-beta.3 / 2024-03-25</h1> <p>This incorporates all changes after 4.19.1 up to 4.19.2.</p> <h1>5.0.0-beta.2 / 2024-03-20</h1> <p>This incorporates all changes after 4.17.2 up to 4.19.1.</p> <h1>5.0.0-beta.1 / 2022-02-14</h1> <p>This is the first Express 5.0 beta release, based off 4.17.2 and includes changes from 5.0.0-alpha.8.</p> <ul> <li>change: <ul> <li>Default &quot;query parser&quot; setting to <code>'simple'</code></li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/expressjs/express/commit/d14b2de782c16fbef39541c9009b01bd6ae90b92"><code>d14b2de</code></a> 5.0.1</li> <li><a href="https://github.com/expressjs/express/commit/2027b87a27396d418f7848cc7fc4c353d798c3d9"><code>2027b87</code></a> fix(deps): [email protected]</li> <li><a href="https://github.com/expressjs/express/commit/2cbf22721defccbb4f29f460ad007002ca87bd72"><code>2cbf227</code></a> Link and update captains (<a href="https://redirect.github.com/expressjs/express/issues/6013">#6013</a>)</li> <li><a href="https://github.com/expressjs/express/commit/3e1a1cedb237568c2a34944a0f4e72eff3a0b40b"><code>3e1a1ce</code></a> Add <a href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> to the triage team (<a href="https://redirect.github.com/expressjs/express/issues/6009">#6009</a>)</li> <li><a href="https://github.com/expressjs/express/commit/6340d1509f83e436f4484be1fb3a6d155ebb6a38"><code>6340d15</code></a> remove --bail from test script (<a href="https://redirect.github.com/expressjs/express/issues/5962">#5962</a>)</li> <li><a href="https://github.com/expressjs/express/commit/344b022fc7ed95cf07b46e097935e61151fd585f"><code>344b022</code></a> 5.0.0</li> <li><a href="https://github.com/expressjs/express/commit/0c49926a9b7aff8bbca2a40d2549db0b41bab5b3"><code>0c49926</code></a> fix(deps): send@^1.1.0</li> <li><a href="https://github.com/expressjs/express/commit/b3906cbdded224554ce1c778996d77b5d2a15ebc"><code>b3906cb</code></a> fix(deps): serve-static@^2.1.0</li> <li><a href="https://github.com/expressjs/express/commit/fed8c2a8857a30b91e07a37f739aee18e756853f"><code>fed8c2a</code></a> fix(deps): body-parser@^2.0.1</li> <li><a href="https://github.com/expressjs/express/commit/bdd81f8670975ef30fd49e92513ef48d35029eaf"><code>bdd81f8</code></a> Delete <code>back</code> as a magic string (<a href="https://redirect.github.com/expressjs/express/issues/5933">#5933</a>)</li> <li>Additional commits viewable in <a href="https://github.com/expressjs/express/compare/4.21.0...5.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>