[Snyk] Upgrade express from 4.21.1 to 4.22.1

[rsaz]

Snyk has created this PR to upgrade express from 4.21.1 to 4.22.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	666	Proof of Concept

Release notes

Package name: express

• 4.22.1 - 2025-12-01
  

  What's Changed

  Important

  The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

  • Release: 4.22.1 by @ UlisesGascon in #6934

  Full Changelog: 4.22.0...v4.22.1

• 4.22.0 - 2025-12-01
  

  Important: Security

  • Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

  What's Changed

  • Refactor: improve readability by @ sazk07 in #6190
  • ci: add support for Node.js@23.0 by @ UlisesGascon in #6080
  • Method functions with no path should error by @ wesleytodd in #5957
  • ci: updated github actions ci workflow by @ Phillip9587 in #6323
  • ci: reorder npm i steps to fix ci for older node versions by @ Phillip9587 in #6336
  • Backport: ci: add node.js 24 to test matrix by @ Phillip9587 in #6506
  • chore(4.x): wider range for query test skip by @ jonchurch in #6513
  • use tilde notation for certain dependencies by @ UlisesGascon in #6905
  • deps: qs@6.14.0 by @ UlisesGascon in #6909
  • deps: use tilde notation for qs by @ Phillip9587 in #6919
  • Release: 4.22.0 by @ UlisesGascon in #6921

  Full Changelog: 4.21.2...4.22.0

• 4.21.2 - 2024-12-05
  

  What's Changed

  • Add funding field (v4) by @ bjohansebas in #6065
  • deps: path-to-regexp@0.1.11 by @ blakeembrey in #5956
  • deps: bump path-to-regexp@0.1.12 by @ jonchurch in #6209
  • Release: 4.21.2 by @ UlisesGascon in #6094

  Full Changelog: 4.21.1...4.21.2

• 4.21.1 - 2024-10-08
  

  What's Changed

  • Backport a fix for CVE-2024-47764 to the 4.x branch by @ joshbuker in #6029
  • Release: 4.21.1 by @ UlisesGascon in #6031

  Full Changelog: 4.21.0...4.21.1

from express GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.64%. Comparing base (8ccfd00) to head (71b308a).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #286   +/-   ##
=======================================
  Coverage   80.64%   80.64%           
=======================================
  Files           6        6           
  Lines         217      217           
  Branches       42       42           
=======================================
  Hits          175      175           
  Misses         40       40           
  Partials        2        2           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.