[Snyk] Upgrade express from 4.21.1 to 5.0.0

[WontonSam]

Snyk has created this PR to upgrade express from 4.21.1 to 5.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 12 versions ahead of your current version.
• The recommended version was released a month ago, on 2024-09-10.

Release notes

Package name: express

• 5.0.0 - 2024-09-10
  Read more
• 5.0.0-beta.3 - 2024-03-25
  

  Full Changelog: 5.0.0-beta.2...v5.0.0-beta.3

• 5.0.0-beta.2 - 2024-03-21
  Read more
• 5.0.0-beta.1 - 2022-02-15
• 5.0.0-alpha.8 - 2020-03-26
• 5.0.0-alpha.7 - 2018-10-27
• 5.0.0-alpha.6 - 2017-09-25
• 5.0.0-alpha.5 - 2017-03-06
• 5.0.0-alpha.4 - 2017-03-02
• 5.0.0-alpha.3 - 2017-01-29
• 5.0.0-alpha.2 - 2015-07-07
• 5.0.0-alpha.1 - 2014-11-07
• 4.21.1 - 2024-10-08
  

  What's Changed

  • Backport a fix for CVE-2024-47764 to the 4.x branch by @ joshbuker in #6029
  • Release: 4.21.1 by @ UlisesGascon in #6031

  Full Changelog: 4.21.0...4.21.1

from express GitHub release notes

Commit messages

Package name: express

• 344b022 5.0.0
• 0c49926 fix(deps): send@^1.1.0
• b3906cb fix(deps): serve-static@^2.1.0
• fed8c2a fix(deps): body-parser@^2.0.1
• bdd81f8 Delete `back` as a magic string ([Doc Request]: Clarifications on Services management and limitations aws/copilot-cli#5933)
• 6c98f80 🔧 update CI, remove unsupported versions, clean up
• f9256ef Merge branch '5.0' into 5-merge
• e5feb9f Merge tag '4.20.0' into 5.0
• 0264908 feat(deps)!: router@^2.0.0 (Adding "ecr:BatchDeleteImage" permission to role-policy-document.yml aws/copilot-cli#5885)
• 4d713d2 update to [email protected] (chore: Bump github.com/moby/buildkit from 0.13.2 to 0.15.2 aws/copilot-cli#5916)
• accafc6 fix(deps): finalhandler@^2.0.0 (chore: Bump github.com/onsi/gomega from 1.33.1 to 1.34.1 aws/copilot-cli#5899)
• 05f40f4 fix(deps)!: content-disposition@^1.0.0 (chore: Bump github.com/aws/aws-sdk-go from 1.54.15 to 1.54.20 aws/copilot-cli#5884)
• 402e7f6 fix(deps): type-is@^2.0.0 ([Feature Request] Support deploy a Copilot svc in different environment with different svc configuration aws/copilot-cli#5883)
• 4e61d01 fix(deps)!: mime-types@^3.0.0 (QUESTION - is it possible to deploy the same ECS service (with same name) across multiple environments but with different container specs aws/copilot-cli#5882)
• 7748475 fix(deps): accepts@^2.0.0 ([Bug]: Secrets Manager Secrets occasionally become undefined in task? aws/copilot-cli#5881)
• 91a58b5 cookie-signature@^1.2.1 (Error out earlier and more gracefully if attempted to change workload type / enable changing workload type aws/copilot-cli#5833)
• 13e6894 chore: [email protected] (Is it possible to do additional_policy during pre_deployments in Pipeline? aws/copilot-cli#5847)
• 65b6206 fix(deps) [email protected] (chore: Bump github.com/aws/aws-sdk-go from 1.51.21 to 1.51.25 aws/copilot-cli#5790)
• 0b243b1 5.x: Upgrading `merge-descriptors` with allowing minors (different environment variable for a subset of the replicas in ECS aws/copilot-cli#5782)
• 0983158 refactor: replace 'path-is-absolute' dep with node:path isAbsolute method ([Bug]: copilot svc exec - fails (more than one ECS service with the name api found in environment) aws/copilot-cli#5830)
• 41c054c chore: upgrade `debug` dep from 3.10 to 4.3.6 (docs: migrate AWS SDK for JavaScript v2 APIs to v3 aws/copilot-cli#5829)
• ecf762f fix(deps)!: send@^1.0.0 (Create devcontainer.json aws/copilot-cli#5786)
• 63992bb Merge branch 'ci/v5-node-lts' into 5-merge
• ea49706 Merge branch 'master' into 5-merge

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.