chore(deps): bump morgan from 1.11.0 to 1.12.0 (#8940)

Bumps [morgan](https://github.com/expressjs/morgan) from 1.11.0 to
1.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/morgan/releases">morgan's
releases</a>.</em></p>
<blockquote>
<h2>1.12.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: upgrade http:// to https:// in README by <a
href="https://github.com/hanu-14"><code>@​hanu-14</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/363">expressjs/morgan#363</a></li>
<li>build: bump github actions and dev dependencies by <a
href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/369">expressjs/morgan#369</a></li>
<li>chore(ci): npm-publish via reusable workflows by <a
href="https://github.com/sheplu"><code>@​sheplu</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/334">expressjs/morgan#334</a></li>
<li>docs: add ES modules import example by <a
href="https://github.com/aladi-debug"><code>@​aladi-debug</code></a> in
<a
href="https://redirect.github.com/expressjs/morgan/pull/352">expressjs/morgan#352</a></li>
<li>docs: fix README lint errors by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/morgan/pull/373">expressjs/morgan#373</a></li>
<li>ci: use latest patch per Node.js major, add 23-26 by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/morgan/pull/374">expressjs/morgan#374</a></li>
<li>feat: pass objects through to streams in objectMode by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/morgan/pull/375">expressjs/morgan#375</a></li>
<li>feat: NO_COLOR env var removes color in dev format by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/morgan/pull/377">expressjs/morgan#377</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/hanu-14"><code>@​hanu-14</code></a> made
their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/363">expressjs/morgan#363</a></li>
<li><a href="https://github.com/sheplu"><code>@​sheplu</code></a> made
their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/369">expressjs/morgan#369</a></li>
<li><a
href="https://github.com/aladi-debug"><code>@​aladi-debug</code></a>
made their first contribution in <a
href="https://redirect.github.com/expressjs/morgan/pull/352">expressjs/morgan#352</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/morgan/compare/1.11.0...1.12.0">https://github.com/expressjs/morgan/compare/1.11.0...1.12.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/morgan/blob/master/HISTORY.md">morgan's
changelog</a>.</em></p>
<blockquote>
<h1>1.12.0</h1>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2026-15603">CVE-2026-15603</a>(<a
href="https://github.com/expressjs/morgan/security/advisories/GHSA-jxfw-x594-9x9m">GHSA-jxfw-x594-9x9m</a>)</li>
<li>Allow format functions to return objects for streams in
<code>objectMode</code></li>
<li>Respect the <code>NO_COLOR</code> environment variable in the
<code>dev</code> format</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/expressjs/morgan/commit/063f084a8de1fe02e52333f0b5df2533ced85e42"><code>063f084</code></a>
1.12.0 (<a
href="https://redirect.github.com/expressjs/morgan/issues/376">#376</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/fbf93833186920cc39bb19b247e4a86b61bef4fe"><code>fbf9383</code></a>
fix: escape all token values in log output</li>
<li><a
href="https://github.com/expressjs/morgan/commit/03383991f55ec5d5e2c0cbdeb783a252f27196a5"><code>0338399</code></a>
feat: NO_COLOR env var removes color in dev format (<a
href="https://redirect.github.com/expressjs/morgan/issues/377">#377</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/51007f94720168a608dfd7c4f61d706bc636a0ef"><code>51007f9</code></a>
feat: pass objects through to streams in objectMode (<a
href="https://redirect.github.com/expressjs/morgan/issues/375">#375</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/4790f5d2036412070da66b93883fa263d668a2ea"><code>4790f5d</code></a>
ci: use latest patch per Node.js major, add 23-26 (<a
href="https://redirect.github.com/expressjs/morgan/issues/374">#374</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/786c66d51db03a605fec46049118c06ef156b47f"><code>786c66d</code></a>
docs: fix README lint errors (<a
href="https://redirect.github.com/expressjs/morgan/issues/373">#373</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/98d848cc21f5cf02a7f473df0f3513d9e69d4209"><code>98d848c</code></a>
docs: add ES modules import example (<a
href="https://redirect.github.com/expressjs/morgan/issues/352">#352</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/fb9a22858fb3878e3b75714695a46f65df65ea09"><code>fb9a228</code></a>
chore(ci): npm-publish via reusable workflows (<a
href="https://redirect.github.com/expressjs/morgan/issues/334">#334</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/4729fe8d2af2bbad91ac8c0235ce98e915b6dfca"><code>4729fe8</code></a>
build: bump github actions and dev dependencies (<a
href="https://redirect.github.com/expressjs/morgan/issues/369">#369</a>)</li>
<li><a
href="https://github.com/expressjs/morgan/commit/bd171d7ed3df7b1b6311f3c202e237aebe1bf830"><code>bd171d7</code></a>
docs: update link (<a
href="https://redirect.github.com/expressjs/morgan/issues/363">#363</a>)</li>
<li>See full diff in <a
href="https://github.com/expressjs/morgan/compare/1.11.0...1.12.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for morgan since your current version.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

yarn.lock

@@ -15839,15 +15839,15 @@ __metadata:
   linkType: hard
 
 "morgan@npm:^1.7.0":
-  version: 1.11.0
-  resolution: "morgan@npm:1.11.0"
+  version: 1.12.0
+  resolution: "morgan@npm:1.12.0"
   dependencies:
     basic-auth: "npm:~2.0.1"
     debug: "npm:2.6.9"
     depd: "npm:~2.0.0"
     on-finished: "npm:~2.4.1"
     on-headers: "npm:~1.1.0"
-  checksum: 10c0/1d8c67bdeb34dc4112f5b6cbff0d5b4ef14bfdcb9f67a7ae67fc7a77282c18dd493a11dc8dff1ff2e285c1846947cfdc3698fdceb1fa7bea2a09fe6cb754455d
+  checksum: 10c0/84480e2414c0df6986ae7ade3cd92f74b960e26e31ba4f8e0791d0a9909813882249f85fde03542b93cdefc7cd9a13f382a28f167a063d01d2877294e059970e
   languageName: node
   linkType: hard