[Snyk] Security upgrade express from 4.18.2 to 4.20.0

[schalla0791]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	738

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[dryrunsecurity]

DryRun Security Summary

This pull request updates the express dependency in the package.json and package-lock.json files from version 4.18.2 to 4.20.0, which is a minor version update that typically includes bug fixes and minor feature improvements without major breaking changes, and the other dependency updates are mostly related to the express package and are likely to be compatible with the new version, as part of a routine update to keep the application dependencies up-to-date, which is a good security practice.

Expand for full summary

Summary:

The code changes in this pull request focus on updating the version of the express dependency in the package.json and package-lock.json files. Updating dependencies to newer versions is generally a positive security practice, as it helps keep the application up-to-date with the latest security patches and bug fixes.

The express dependency is being updated from version 4.18.2 to 4.20.0, which is a minor version update. Minor version updates typically include bug fixes and minor feature improvements, but no major breaking changes. The other changes in the package-lock.json file are mostly dependencies of the express package, and these updates are likely to be compatible with the new version of express.

Overall, these code changes appear to be a routine update to keep the application dependencies up-to-date, which is a good security practice. However, it's always recommended to thoroughly test the application after any dependency updates to ensure there are no regressions or unexpected behavior changes.

Files Changed:

1. package.json: The express dependency version has been updated from 4.18.2 to 4.20.0.
2. package-lock.json: The express package version has been updated from ^4.18.2 to ^4.20.0. The other dependency updates are mostly related to the express package and are likely to be compatible with the new version.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	2 findings

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.