🐛 Upgrade express dependency

[sjd78]

Resolves: https://issues.redhat.com/browse/MTA-2934

Upgrade the express dependency in the server workspace to resolve security issues.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 42.33%. Comparing base (b654645) to head (3062d2b).
Report is 206 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2036      +/-   ##
==========================================
+ Coverage   39.20%   42.33%   +3.13%     
==========================================
  Files         146      172      +26     
  Lines        4857     5525     +668     
  Branches     1164     1360     +196     
==========================================
+ Hits         1904     2339     +435     
- Misses       2939     3071     +132     
- Partials       14      115     +101     

Flag	Coverage Δ
client	42.33% <ø> (+3.13%)	⬆️
server	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[rayfordj]

We're still pulling in 4.18.2 as a dependency with this change.

$ curl -s 'https://cachito.engineering.redhat.com/api/v1/requests/1559257' | jq -r '.packages[].dependencies[]| select(.name == "express")'
{
  "dev": false,
  "name": "express",
  "replaces": null,
  "type": "npm",
  "version": "4.18.2"
}
{
  "dev": false,
  "name": "express",
  "replaces": null,
  "type": "npm",
  "version": "4.19.2"
}

[rayfordj]

/lgtm

Successful downstream scratch build with this change.

$ curl -s 'https://cachito.engineering.redhat.com/api/v1/requests/1559286' | jq -r '.packages[].dependencies[]| select(.name == "express")'
{
  "dev": false,
  "name": "express",
  "replaces": null,
  "type": "npm",
  "version": "4.19.2"
}
{
  "dev": true,  # <-- devDependency, no concerns
  "name": "express",
  "replaces": null,
  "type": "npm",
  "version": "4.18.2"
}

[sjd78]

Note to self: This PR needs to be manually backported to release-0.2 since the cherry-pick bot doesn't go back that far.

[rayfordj]

Even better 😎
Thanks, @sjd78 !

/lgtm

$ curl -s 'https://cachito.engineering.redhat.com/api/v1/requests/1559440' | jq -r '.packages[].dependencies[]| select(.name == "express")'
{
  "dev": false,
  "name": "express",
  "replaces": null,
  "type": "npm",
  "version": "4.19.2"
}