Merge pull request #17974 from overleaf/rh-express-4192

Upgrade express to 4.19.2

GitOrigin-RevId: 383877c39670093033d802af0fae54ec578ba327

libraries/fetch-utils/package.json

@@ -22,7 +22,7 @@
     "body-parser": "^1.20.2",
     "chai": "^4.3.6",
     "chai-as-promised": "^7.1.1",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "mocha": "^10.2.0",
     "typescript": "^5.0.4"
   },

package-lock.json

@@ -119,85 +119,11 @@
         "body-parser": "^1.20.2",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "mocha": "^10.2.0",
         "typescript": "^5.0.4"
       }
     },
-    "libraries/fetch-utils/node_modules/body-parser": {
-      "version": "1.20.2",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.2.tgz",
-      "integrity": "sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==",
-      "dev": true,
-      "dependencies": {
-        "bytes": "3.1.2",
-        "content-type": "~1.0.5",
-        "debug": "2.6.9",
-        "depd": "2.0.0",
-        "destroy": "1.2.0",
-        "http-errors": "2.0.0",
-        "iconv-lite": "0.4.24",
-        "on-finished": "2.4.1",
-        "qs": "6.11.0",
-        "raw-body": "2.5.2",
-        "type-is": "~1.6.18",
-        "unpipe": "1.0.0"
-      },
-      "engines": {
-        "node": ">= 0.8",
-        "npm": "1.2.8000 || >= 1.4.16"
-      }
-    },
-    "libraries/fetch-utils/node_modules/debug": {
-      "version": "2.6.9",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
-      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
-      "dev": true,
-      "dependencies": {
-        "ms": "2.0.0"
-      }
-    },
-    "libraries/fetch-utils/node_modules/depd": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
-      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
-      "dev": true,
-      "engines": {
-        "node": ">= 0.8"
-      }
-    },
-    "libraries/fetch-utils/node_modules/destroy": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
-      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
-      "dev": true,
-      "engines": {
-        "node": ">= 0.8",
-        "npm": "1.2.8000 || >= 1.4.16"
-      }
-    },
-    "libraries/fetch-utils/node_modules/http-errors": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
-      "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==",
-      "dev": true,
-      "dependencies": {
-        "depd": "2.0.0",
-        "inherits": "2.0.4",
-        "setprototypeof": "1.2.0",
-        "statuses": "2.0.1",
-        "toidentifier": "1.0.1"
-      },
-      "engines": {
-        "node": ">= 0.8"
-      }
-    },
-    "libraries/fetch-utils/node_modules/ms": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
-      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-      "dev": true
-    },
     "libraries/fetch-utils/node_modules/node-fetch": {
       "version": "2.6.12",
       "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.12.tgz",
@@ -217,42 +143,6 @@
         }
       }
     },
-    "libraries/fetch-utils/node_modules/on-finished": {
-      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
-      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
-      "dev": true,
-      "dependencies": {
-        "ee-first": "1.1.1"
-      },
-      "engines": {
-        "node": ">= 0.8"
-      }
-    },
-    "libraries/fetch-utils/node_modules/raw-body": {
-      "version": "2.5.2",
-      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
-      "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
-      "dev": true,
-      "dependencies": {
-        "bytes": "3.1.2",
-        "http-errors": "2.0.0",
-        "iconv-lite": "0.4.24",
-        "unpipe": "1.0.0"
-      },
-      "engines": {
-        "node": ">= 0.8"
-      }
-    },
-    "libraries/fetch-utils/node_modules/statuses": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
-      "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
-      "dev": true,
-      "engines": {
-        "node": ">= 0.8"
-      }
-    },
     "libraries/fetch-utils/node_modules/tr46": {
       "version": "0.0.3",
       "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
@@ -15658,12 +15548,12 @@
       "dev": true
     },
     "node_modules/body-parser": {
-      "version": "1.20.1",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz",
-      "integrity": "sha512-jWi7abTbYwajOytWCQc37VulmWiRae5RyTpaCyDcS5/lMdtwSz5lOpDE67srw/HYe35f1z3fDQw+3txg7gNtWw==",
+      "version": "1.20.2",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.2.tgz",
+      "integrity": "sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==",
       "dependencies": {
         "bytes": "3.1.2",
-        "content-type": "~1.0.4",
+        "content-type": "~1.0.5",
         "debug": "2.6.9",
         "depd": "2.0.0",
         "destroy": "1.2.0",
@@ -15671,7 +15561,7 @@
         "iconv-lite": "0.4.24",
         "on-finished": "2.4.1",
         "qs": "6.11.0",
-        "raw-body": "2.5.1",
+        "raw-body": "2.5.2",
         "type-is": "~1.6.18",
         "unpipe": "1.0.0"
       },
@@ -21538,16 +21428,16 @@
       }
     },
     "node_modules/express": {
-      "version": "4.18.2",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
-      "integrity": "sha512-5/PsL6iGPdfQ/lKM1UuielYgv3BUoJfz1aUwU9vHZ+J7gyvwdQXFEBIEIaxeGf0GIcreATNyBExtalisDbuMqQ==",
+      "version": "4.19.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.19.2.tgz",
+      "integrity": "sha512-5T6nhjsT+EOMzuck8JjBHARTHfMht0POzlA60WV2pMD3gyXw2LZnZ+ueGdNxG+0calOJcWKbpFcuzLZ91YWq9Q==",
       "dependencies": {
         "accepts": "~1.3.8",
         "array-flatten": "1.1.1",
-        "body-parser": "1.20.1",
+        "body-parser": "1.20.2",
         "content-disposition": "0.5.4",
         "content-type": "~1.0.4",
-        "cookie": "0.5.0",
+        "cookie": "0.6.0",
         "cookie-signature": "1.0.6",
         "debug": "2.6.9",
         "depd": "2.0.0",
@@ -21718,9 +21608,9 @@
       ]
     },
     "node_modules/express/node_modules/cookie": {
-      "version": "0.5.0",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz",
-      "integrity": "sha512-YZ3GUyn/o8gfKJlnlX7g7xq4gyO6OSuhGPKaaGssGB2qgDUS0gPgtTvoyZLTt9Ab6dC4hfc9dV5arkvc/OCmrw==",
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz",
+      "integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==",
       "engines": {
         "node": ">= 0.6"
       }
@@ -33691,9 +33581,9 @@
       "integrity": "sha512-dgH4T44TzKVO9CLArNto62hJOwlWJMLUjVVr/ii0uUzZXEXthDNr7/yefW5z/1vvHAfycc1tnuiYyNJ8CTRB3g=="
     },
     "node_modules/raw-body": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz",
-      "integrity": "sha512-qqJBtEyVgS0ZmPGdCFPWJ3FreoqvG4MVQln/kCgF7Olq95IbOp0/BWyMwbdtn4VTvkM8Y7khCQ2Xgk/tcrCXig==",
+      "version": "2.5.2",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
+      "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
       "dependencies": {
         "bytes": "3.1.2",
         "http-errors": "2.0.0",
@@ -40451,7 +40341,7 @@
         "celebrate": "^15.0.3",
         "csv": "^5.4.0",
         "east": "^2.0.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "joi": "^17.12.0",
         "json2csv": "^4.5.4",
         "lodash": "^4.17.21",
@@ -40574,7 +40464,7 @@
         "async": "^3.2.2",
         "body-parser": "^1.19.0",
         "exegesis-express": "^4.0.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "mongodb": "^6.1.0"
       },
       "devDependencies": {
@@ -40676,7 +40566,7 @@
         "bunyan": "^1.8.15",
         "diskusage": "^1.1.3",
         "dockerode": "^3.1.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "p-limit": "^3.1.0",
         "request": "^2.88.2",
@@ -40706,7 +40596,7 @@
         "@overleaf/settings": "*",
         "bunyan": "^1.8.15",
         "cookie": "^0.4.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "glob": "^7.2.0",
         "p-limit": "^3.1.0"
       },
@@ -40774,7 +40664,7 @@
         "async": "^3.2.2",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "mongodb": "^6.1.0",
         "request": "~2.88.2",
         "underscore": "~1.13.1"
@@ -40911,7 +40801,7 @@
         "bson": "^1.1.4",
         "bunyan": "^1.8.15",
         "celebrate": "^15.0.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mongodb": "^6.2.0",
         "mongodb-legacy": "^6.0.1",
@@ -41051,7 +40941,7 @@
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
         "diff-match-patch": "overleaf/diff-match-patch#89805f9c671a77a263fc53461acd62aa7498f688",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mongodb": "^6.2.0",
         "mongodb-legacy": "^6.0.1",
@@ -41148,7 +41038,7 @@
         "@overleaf/stream-utils": "^0.1.0",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "glob": "^7.1.6",
         "lodash.once": "^4.1.1",
         "node-fetch": "^2.6.7",
@@ -41289,7 +41179,7 @@
         "@overleaf/fetch-utils": "*",
         "@overleaf/logger": "*",
         "@overleaf/metrics": "*",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "is-valid-hostname": "^1.0.2",
         "tar-stream": "^2.2.0",
         "zlib": "^1.0.5"
@@ -41314,7 +41204,7 @@
         "base64-stream": "^0.1.2",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mongodb": "^6.1.0",
         "mongodb-legacy": "^6.0.1",
@@ -41434,7 +41324,7 @@
         "config": "^1.19.0",
         "cookie-parser": "~1.4.5",
         "cors": "^2.8.5",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "fs-extra": "^9.0.1",
         "generic-pool": "^2.1.1",
         "helmet": "^3.22.0",
@@ -41601,7 +41491,7 @@
     "services/idp": {
       "name": "@overleaf/idp",
       "dependencies": {
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "samlp": "^7.0.2"
       },
       "devDependencies": {
@@ -42817,7 +42707,7 @@
         "async": "^3.2.2",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "method-override": "^3.0.0",
         "mongodb": "^6.1.0",
         "mongodb-legacy": "^6.0.1",
@@ -42918,7 +42808,7 @@
         "cli": "^1.0.1",
         "diff-match-patch": "overleaf/diff-match-patch#89805f9c671a77a263fc53461acd62aa7498f688",
         "esmock": "^2.6.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "heap": "^0.2.6",
         "line-reader": "^0.2.4",
         "lodash": "^4.17.20",
@@ -42993,7 +42883,7 @@
         "bunyan": "^1.8.15",
         "connect-redis": "^6.1.3",
         "cookie-parser": "^1.4.5",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "express-session": "^1.17.1",
         "joi": "^17.12.0",
         "lodash": "^4.17.21",
@@ -43051,7 +42941,7 @@
         "async": "^3.2.2",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "ioredis": "^4.16.1",
         "lodash": "^4.17.19",
         "request": "^2.88.2"
@@ -43077,7 +42967,7 @@
         "async": "^3.2.2",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lru-cache": "^5.1.1",
         "request": "^2.88.2",
         "underscore": "1.13.1"
@@ -43106,7 +42996,7 @@
         "async": "3.2.2",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "install": "^0.13.0",
         "lodash": "^4.17.21",
         "marked": "^4.1.0",
@@ -43136,7 +43026,7 @@
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
         "dropbox": "^10.34.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "lru-cache": "^4.1.5",
         "minimatch": "^7.4.2",
@@ -43259,7 +43149,7 @@
         "async": "^3.2.2",
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "lru-cache": "^5.1.1",
         "mongodb": "^6.1.0",
@@ -43398,7 +43288,7 @@
         "body-parser": "^1.19.0",
         "bunyan": "^1.8.15",
         "dtrace-provider": "^0.8.8",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "express-basic-auth": "^1.2.0",
         "ioredis": "^4.16.0",
         "lodash": "^4.17.15",
@@ -43496,7 +43386,7 @@
         "dateformat": "1.0.4-1.2.3",
         "east": "^2.0.2",
         "email-addresses": "^5.0.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "express-bearer-token": "^2.4.0",
         "express-http-proxy": "^1.6.0",
         "express-session": "^1.17.1",
@@ -50578,7 +50468,7 @@
         "chai-as-promised": "^7.1.1",
         "csv": "^5.4.0",
         "east": "^2.0.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "joi": "^17.12.0",
         "json2csv": "^4.5.4",
         "lodash": "^4.17.21",
@@ -50651,7 +50541,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "exegesis-express": "^4.0.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "mocha": "^10.2.0",
         "mongodb": "^6.1.0",
         "request": "^2.88.2",
@@ -50710,7 +50600,7 @@
         "chai-as-promised": "^7.1.1",
         "diskusage": "^1.1.3",
         "dockerode": "^3.1.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mocha": "^10.2.0",
         "mock-fs": "^5.1.2",
@@ -50770,7 +50660,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "cookie": "^0.4.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "glob": "^7.2.0",
         "mocha": "^10.2.0",
         "p-limit": "^3.1.0",
@@ -50803,7 +50693,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "esmock": "^2.6.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "mocha": "^10.2.0",
         "mongodb": "^6.1.0",
         "request": "~2.88.2",
@@ -50889,7 +50779,7 @@
         "celebrate": "^15.0.3",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mocha": "^10.2.0",
         "mongodb": "^6.2.0",
@@ -50980,7 +50870,7 @@
         "chai-as-promised": "^7.1.1",
         "cluster-key-slot": "^1.0.5",
         "diff-match-patch": "overleaf/diff-match-patch#89805f9c671a77a263fc53461acd62aa7498f688",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mocha": "^10.2.0",
         "mongodb": "^6.2.0",
@@ -51036,73 +50926,13 @@
         "body-parser": "^1.20.2",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mocha": "^10.2.0",
         "node-fetch": "^2.6.11",
         "typescript": "^5.0.4"
       },
       "dependencies": {
-        "body-parser": {
-          "version": "1.20.2",
-          "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.2.tgz",
-          "integrity": "sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==",
-          "dev": true,
-          "requires": {
-            "bytes": "3.1.2",
-            "content-type": "~1.0.5",
-            "debug": "2.6.9",
-            "depd": "2.0.0",
-            "destroy": "1.2.0",
-            "http-errors": "2.0.0",
-            "iconv-lite": "0.4.24",
-            "on-finished": "2.4.1",
-            "qs": "6.11.0",
-            "raw-body": "2.5.2",
-            "type-is": "~1.6.18",
-            "unpipe": "1.0.0"
-          }
-        },
-        "debug": {
-          "version": "2.6.9",
-          "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
-          "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
-          "dev": true,
-          "requires": {
-            "ms": "2.0.0"
-          }
-        },
-        "depd": {
-          "version": "2.0.0",
-          "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
-          "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
-          "dev": true
-        },
-        "destroy": {
-          "version": "1.2.0",
-          "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
-          "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
-          "dev": true
-        },
-        "http-errors": {
-          "version": "2.0.0",
-          "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
-          "integrity": "sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==",
-          "dev": true,
-          "requires": {
-            "depd": "2.0.0",
-            "inherits": "2.0.4",
-            "setprototypeof": "1.2.0",
-            "statuses": "2.0.1",
-            "toidentifier": "1.0.1"
-          }
-        },
-        "ms": {
-          "version": "2.0.0",
-          "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
-          "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-          "dev": true
-        },
         "node-fetch": {
           "version": "2.6.12",
           "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.12.tgz",
@@ -51111,33 +50941,6 @@
             "whatwg-url": "^5.0.0"
           }
         },
-        "on-finished": {
-          "version": "2.4.1",
-          "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
-          "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
-          "dev": true,
-          "requires": {
-            "ee-first": "1.1.1"
-          }
-        },
-        "raw-body": {
-          "version": "2.5.2",
-          "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
-          "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
-          "dev": true,
-          "requires": {
-            "bytes": "3.1.2",
-            "http-errors": "2.0.0",
-            "iconv-lite": "0.4.24",
-            "unpipe": "1.0.0"
-          }
-        },
-        "statuses": {
-          "version": "2.0.1",
-          "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
-          "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
-          "dev": true
-        },
         "tr46": {
           "version": "0.0.3",
           "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
@@ -51175,7 +50978,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "disrequire": "^1.1.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "glob": "^7.1.6",
         "lodash.once": "^4.1.1",
         "mocha": "^10.2.0",
@@ -51267,7 +51070,7 @@
         "bunyan": "^1.8.15",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "mocha": "^10.2.0",
         "mongodb": "^6.1.0",
@@ -51323,7 +51126,7 @@
       "requires": {
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "mocha": "^10.2.0",
         "samlp": "^7.0.2",
         "typescript": "^5.0.4"
@@ -51385,7 +51188,7 @@
         "bunyan": "^1.8.15",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "method-override": "^3.0.0",
         "mocha": "^10.2.0",
         "mongodb": "^6.1.0",
@@ -51516,7 +51319,7 @@
         "cli": "^1.0.1",
         "diff-match-patch": "overleaf/diff-match-patch#89805f9c671a77a263fc53461acd62aa7498f688",
         "esmock": "^2.6.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "heap": "^0.2.6",
         "line-reader": "^0.2.4",
         "lodash": "^4.17.20",
@@ -51633,7 +51436,7 @@
         "connect-redis": "^6.1.3",
         "cookie-parser": "^1.4.5",
         "cookie-signature": "^1.1.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "express-session": "^1.17.1",
         "joi": "^17.12.0",
         "lodash": "^4.17.21",
@@ -51702,7 +51505,7 @@
         "bunyan": "^1.8.15",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "ioredis": "^4.16.1",
         "lodash": "^4.17.19",
         "mocha": "^10.2.0",
@@ -51732,7 +51535,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "esmock": "^2.6.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lru-cache": "^5.1.1",
         "mocha": "^10.2.0",
         "request": "^2.88.2",
@@ -51769,7 +51572,7 @@
         "bunyan": "^1.8.15",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "install": "^0.13.0",
         "lodash": "^4.17.21",
         "marked": "^4.1.0",
@@ -51797,7 +51600,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "dropbox": "^10.34.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "lru-cache": "^4.1.5",
         "minimatch": "^7.4.2",
@@ -51899,7 +51702,7 @@
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
         "esmock": "^2.6.3",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "lodash": "^4.17.21",
         "lru-cache": "^5.1.1",
         "mocha": "^10.2.0",
@@ -51986,7 +51789,7 @@
         "chai-as-promised": "^7.1.1",
         "chai-http": "^4.4.0",
         "dtrace-provider": "^0.8.8",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "express-basic-auth": "^1.2.0",
         "ioredis": "^4.16.0",
         "lodash": "^4.17.15",
@@ -52161,7 +51964,7 @@
         "eslint-plugin-react-hooks": "^4.6.0",
         "events": "^3.3.0",
         "expose-loader": "^4.1.0",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "express-bearer-token": "^2.4.0",
         "express-http-proxy": "^1.6.0",
         "express-session": "^1.17.1",
@@ -58911,12 +58714,12 @@
       "dev": true
     },
     "body-parser": {
-      "version": "1.20.1",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz",
-      "integrity": "sha512-jWi7abTbYwajOytWCQc37VulmWiRae5RyTpaCyDcS5/lMdtwSz5lOpDE67srw/HYe35f1z3fDQw+3txg7gNtWw==",
+      "version": "1.20.2",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.2.tgz",
+      "integrity": "sha512-ml9pReCu3M61kGlqoTm2umSXTlRTuGTx0bfYj+uIUKKYycG5NtSbeetV3faSU6R7ajOPw0g/J1PvK4qNy7s5bA==",
       "requires": {
         "bytes": "3.1.2",
-        "content-type": "~1.0.4",
+        "content-type": "~1.0.5",
         "debug": "2.6.9",
         "depd": "2.0.0",
         "destroy": "1.2.0",
@@ -58924,7 +58727,7 @@
         "iconv-lite": "0.4.24",
         "on-finished": "2.4.1",
         "qs": "6.11.0",
-        "raw-body": "2.5.1",
+        "raw-body": "2.5.2",
         "type-is": "~1.6.18",
         "unpipe": "1.0.0"
       },
@@ -63355,16 +63158,16 @@
       "requires": {}
     },
     "express": {
-      "version": "4.18.2",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.18.2.tgz",
-      "integrity": "sha512-5/PsL6iGPdfQ/lKM1UuielYgv3BUoJfz1aUwU9vHZ+J7gyvwdQXFEBIEIaxeGf0GIcreATNyBExtalisDbuMqQ==",
+      "version": "4.19.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.19.2.tgz",
+      "integrity": "sha512-5T6nhjsT+EOMzuck8JjBHARTHfMht0POzlA60WV2pMD3gyXw2LZnZ+ueGdNxG+0calOJcWKbpFcuzLZ91YWq9Q==",
       "requires": {
         "accepts": "~1.3.8",
         "array-flatten": "1.1.1",
-        "body-parser": "1.20.1",
+        "body-parser": "1.20.2",
         "content-disposition": "0.5.4",
         "content-type": "~1.0.4",
-        "cookie": "0.5.0",
+        "cookie": "0.6.0",
         "cookie-signature": "1.0.6",
         "debug": "2.6.9",
         "depd": "2.0.0",
@@ -63393,9 +63196,9 @@
       },
       "dependencies": {
         "cookie": {
-          "version": "0.5.0",
-          "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz",
-          "integrity": "sha512-YZ3GUyn/o8gfKJlnlX7g7xq4gyO6OSuhGPKaaGssGB2qgDUS0gPgtTvoyZLTt9Ab6dC4hfc9dV5arkvc/OCmrw=="
+          "version": "0.6.0",
+          "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.6.0.tgz",
+          "integrity": "sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw=="
         },
         "cookie-signature": {
           "version": "1.0.6",
@@ -64263,7 +64066,7 @@
         "@overleaf/metrics": "*",
         "chai": "^4.3.6",
         "chai-as-promised": "^7.1.1",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "is-valid-hostname": "^1.0.2",
         "mocha": "^10.2.0",
         "tar-stream": "^2.2.0",
@@ -71115,7 +70918,7 @@
         "config": "^1.19.0",
         "cookie-parser": "~1.4.5",
         "cors": "^2.8.5",
-        "express": "^4.18.2",
+        "express": "^4.19.2",
         "fs-extra": "^9.0.1",
         "generic-pool": "^2.1.1",
         "helmet": "^3.22.0",
@@ -73437,9 +73240,9 @@
       "integrity": "sha512-dgH4T44TzKVO9CLArNto62hJOwlWJMLUjVVr/ii0uUzZXEXthDNr7/yefW5z/1vvHAfycc1tnuiYyNJ8CTRB3g=="
     },
     "raw-body": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz",
-      "integrity": "sha512-qqJBtEyVgS0ZmPGdCFPWJ3FreoqvG4MVQln/kCgF7Olq95IbOp0/BWyMwbdtn4VTvkM8Y7khCQ2Xgk/tcrCXig==",
+      "version": "2.5.2",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
+      "integrity": "sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==",
       "requires": {
         "bytes": "3.1.2",
         "http-errors": "2.0.0",

services/chat/package.json

@@ -24,7 +24,7 @@
     "async": "^3.2.2",
     "body-parser": "^1.19.0",
     "exegesis-express": "^4.0.0",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "mongodb": "^6.1.0"
   },
   "devDependencies": {

services/clsi/package.json

@@ -28,7 +28,7 @@
     "bunyan": "^1.8.15",
     "diskusage": "^1.1.3",
     "dockerode": "^3.1.0",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "lodash": "^4.17.21",
     "p-limit": "^3.1.0",
     "request": "^2.88.2",

services/contacts/package.json

@@ -24,7 +24,7 @@
     "async": "^3.2.2",
     "body-parser": "^1.19.0",
     "bunyan": "^1.8.15",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "mongodb": "^6.1.0",
     "request": "~2.88.2",
     "underscore": "~1.13.1"

services/docstore/package.json

@@ -29,7 +29,7 @@
     "bson": "^1.1.4",
     "bunyan": "^1.8.15",
     "celebrate": "^15.0.3",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "lodash": "^4.17.21",
     "mongodb": "^6.2.0",
     "mongodb-legacy": "^6.0.1",

services/document-updater/package.json

@@ -30,7 +30,7 @@
     "body-parser": "^1.19.0",
     "bunyan": "^1.8.15",
     "diff-match-patch": "overleaf/diff-match-patch#89805f9c671a77a263fc53461acd62aa7498f688",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "lodash": "^4.17.21",
     "mongodb": "^6.2.0",
     "mongodb-legacy": "^6.0.1",

services/filestore/package.json

@@ -27,7 +27,7 @@
     "@overleaf/stream-utils": "^0.1.0",
     "body-parser": "^1.19.0",
     "bunyan": "^1.8.15",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "glob": "^7.1.6",
     "lodash.once": "^4.1.1",
     "node-fetch": "^2.6.7",

services/history-v1/package.json

@@ -21,7 +21,7 @@
     "config": "^1.19.0",
     "cookie-parser": "~1.4.5",
     "cors": "^2.8.5",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "fs-extra": "^9.0.1",
     "generic-pool": "^2.1.1",
     "helmet": "^3.22.0",

services/notifications/package.json

@@ -25,7 +25,7 @@
     "async": "^3.2.2",
     "body-parser": "^1.19.0",
     "bunyan": "^1.8.15",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "method-override": "^3.0.0",
     "mongodb": "^6.1.0",
     "mongodb-legacy": "^6.0.1",

services/project-history/package.json

@@ -34,7 +34,7 @@
     "cli": "^1.0.1",
     "diff-match-patch": "overleaf/diff-match-patch#89805f9c671a77a263fc53461acd62aa7498f688",
     "esmock": "^2.6.3",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "heap": "^0.2.6",
     "line-reader": "^0.2.4",
     "lodash": "^4.17.20",

services/real-time/package.json

@@ -28,7 +28,7 @@
     "bunyan": "^1.8.15",
     "connect-redis": "^6.1.3",
     "cookie-parser": "^1.4.5",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "express-session": "^1.17.1",
     "joi": "^17.12.0",
     "lodash": "^4.17.21",

services/spelling/package.json

@@ -31,7 +31,7 @@
     "async": "^3.2.2",
     "body-parser": "^1.19.0",
     "bunyan": "^1.8.15",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "lru-cache": "^5.1.1",
     "request": "^2.88.2",
     "underscore": "1.13.1"

services/web/package.json

@@ -106,7 +106,7 @@
     "dateformat": "1.0.4-1.2.3",
     "east": "^2.0.2",
     "email-addresses": "^5.0.0",
-    "express": "^4.18.2",
+    "express": "^4.19.2",
     "express-bearer-token": "^2.4.0",
     "express-http-proxy": "^1.6.0",
     "express-session": "^1.17.1",