fix(deps): update external fixes

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
express (source)	4.19.2 -> 4.21.0
husky	9.1.5 -> 9.1.6
semantic-release	24.1.0 -> 24.1.1
sinon (source)	18.0.0 -> 18.0.1

---

Release Notes

expressjs/express (express)

v4.21.0

Compare Source

What's Changed

• Deprecate "back" magic string in redirects by @​blakeembrey in https://github.com/expressjs/express/pull/5935
• [email protected] by @​wesleytodd in https://github.com/expressjs/express/pull/5954
• fix(deps): [email protected] by @​wesleytodd in https://github.com/expressjs/express/pull/5951
• Upgraded dependency qs to 6.13.0 to match qs in body-parser by @​agadzinski93 in https://github.com/expressjs/express/pull/5946

New Contributors

• @​agadzinski93 made their first contribution in https://github.com/expressjs/express/pull/5946

Full Changelog: expressjs/express@4.20.0...4.21.0

v4.20.0

Compare Source

==========

• deps: [email protected]
  • Remove link renderization in html while redirecting
• deps: [email protected]
  • Remove link renderization in html while redirecting
• deps: [email protected]
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
• Remove link renderization in html while using res.redirect
• deps: [email protected]
  • Adds support for named matching groups in the routes using a regex
  • Adds backtracking protection to parameters without regexes defined
• deps: encodeurl@~2.0.0
  • Removes encoding of \, |, and ^ to align better with URL spec
• Deprecate passing options.maxAge and options.expires to res.clearCookie
  • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

typicode/husky (husky)

v9.1.6

Compare Source

semantic-release/semantic-release (semantic-release)

v24.1.1

Compare Source

sinonjs/sinon (sinon)

v18.0.1

Compare Source

Basically a patch release to update a transitive dependency in Nise.

• 03e33ec6
  Pin [email protected] to avoid breaking change (Carl-Erik Kopseng)
• 5a7924ad
  Add createStubInstance header in stubs.md (Daniel Kaplan)
• ad6804cd
  Bump elliptic from 6.5.5 to 6.5.7 (#​2608) (dependabot[bot])
• 033287bd
  Bump path-to-regexp and nise (#​2611) (dependabot[bot])

  Bumps path-to-regexp to 8.1.0 and updates ancestor dependency nise. These dependencies need to be updated together.

  Updates path-to-regexp from 6.2.2 to 8.1.0

  • Release notes
  • Changelog
  • Commits

  Updates nise from 6.0.0 to 6.0.1

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: path-to-regexp

    dependency-type: indirect

  • dependency-name: nise

    dependency-type: direct:production

  ...

  Signed-off-by: dependabot[bot] [email protected]

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• 0c609f95
  re-add testing of esm browser builds (Carl-Erik Kopseng)

  It seems unclear why it was removed in the first place: I have tested extensively that it
  does work and it does fail the build if changing any assertion in the script

• da4230a0
  Bump braces from 3.0.2 to 3.0.3 (#​2605) (dependabot[bot])

  Bumps braces from 3.0.2 to 3.0.3.

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: braces

    dependency-type: indirect

  ...

  Signed-off-by: dependabot[bot] [email protected]

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• 02542370
  feat(ci): add node v22 (#​2600) (Rotzbua)
• 794cb81a
  fix(tests): typo (#​2603) (Rotzbua)
• 1eb2a254
  Use NodeJS 22.2.0 as base development version (Carl-Erik Kopseng)
• 1aa713fd
  Bump rexml from 3.2.5 to 3.2.8 (#​2599) (dependabot[bot])

  Bumps rexml from 3.2.5 to 3.2.8. >

  • Release notes >
  • Changelog >
  • Commits > >
    --- >
    updated-dependencies: >
  • dependency-name: rexml >
    dependency-type: indirect >
    ... > >
    Signed-off-by: dependabot[bot] [email protected] >
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

Released by Carl-Erik Kopseng on 2024-09-10.

---

Configuration

📅 Schedule: Branch creation - "after 2pm on Saturday" in timezone Europe/Zurich, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

This PR will trigger a patch release when merged.