From ce82d09462917f2b1c6cc04e3d4162bad59ecfcc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 12 Sep 2024 16:11:41 +0000
Subject: [PATCH] chore(deps): bump the npm_and_yarn group with 3 updates

Bumps the npm_and_yarn group with 3 updates: [postcss](https://github.com/postcss/postcss), [express](https://github.com/expressjs/express) and [serve-static](https://github.com/expressjs/serve-static).


Updates `postcss` from 8.4.43 to 8.4.44
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.4.43...8.4.44)

Updates `express` from 4.20.0 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.20.0...4.21.0)

Updates `serve-static` from 1.14.2 to 1.16.0
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/serve-static/compare/v1.14.2...1.16.0)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json                              |   2 +-
 packages/123done/package.json             |   2 +-
 packages/browserid-verifier/package.json  |   2 +-
 packages/fortress/package.json            |   2 +-
 packages/fxa-admin-panel/package.json     |   4 +-
 packages/fxa-admin-server/package.json    |   2 +-
 packages/fxa-content-server/package.json  |   4 +-
 packages/fxa-event-broker/package.json    |   2 +-
 packages/fxa-graphql-api/package.json     |   2 +-
 packages/fxa-payments-server/package.json |   4 +-
 packages/fxa-settings/package.json        |   2 +-
 packages/fxa-shared/package.json          |   2 +-
 yarn.lock                                 | 114 +++++++++-------------
 13 files changed, 63 insertions(+), 81 deletions(-)

diff --git a/package.json b/package.json
index 7bf850fe4a..a54ba8b22b 100644
--- a/package.json
+++ b/package.json
@@ -234,7 +234,7 @@
     "nx": "19.5.3",
     "nx-cloud": "19.0.0",
     "persistgraphql": "^0.3.11",
-    "postcss": "8.4.43",
+    "postcss": "8.4.44",
     "react-test-renderer": "^18.3.1",
     "reflect-metadata": "^0.2.1",
     "server-only": "^0.0.1",
diff --git a/packages/123done/package.json b/packages/123done/package.json
index a1028caeb1..f18d52b942 100644
--- a/packages/123done/package.json
+++ b/packages/123done/package.json
@@ -23,7 +23,7 @@
     "convict": "^6.2.4",
     "convict-format-with-validator": "^6.2.0",
     "cookie-session": "^2.1.0",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "ioredis": "^5.0.6",
     "morgan": "^1.10.0",
     "request": "^2.88.2"
diff --git a/packages/browserid-verifier/package.json b/packages/browserid-verifier/package.json
index 1e5ce21611..cd6adc1733 100644
--- a/packages/browserid-verifier/package.json
+++ b/packages/browserid-verifier/package.json
@@ -19,7 +19,7 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "intel": "1.2.0",
     "morgan": "^1.10.0",
     "mozlog": "^3.0.2",
diff --git a/packages/fortress/package.json b/packages/fortress/package.json
index 2015088d09..d2c5d4c1bd 100644
--- a/packages/fortress/package.json
+++ b/packages/fortress/package.json
@@ -22,7 +22,7 @@
   "dependencies": {
     "client-sessions": "0.8.x",
     "ejs": "^3.1.10",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "morgan": "^1.10.0"
   },
   "devDependencies": {
diff --git a/packages/fxa-admin-panel/package.json b/packages/fxa-admin-panel/package.json
index 7a65ddee1b..d5c9a74bdb 100644
--- a/packages/fxa-admin-panel/package.json
+++ b/packages/fxa-admin-panel/package.json
@@ -41,7 +41,7 @@
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
     "dateformat": "^4.6.3",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "express-http-proxy": "^2.0.0",
     "fxa-admin-server": "workspace:*",
     "fxa-react": "workspace:*",
@@ -50,7 +50,7 @@
     "on-headers": "^1.0.2",
     "react-router-dom": "^6.26.0",
     "react-scripts": "^5.0.1",
-    "serve-static": "^1.14.2"
+    "serve-static": "^1.16.0"
   },
   "devDependencies": {
     "@babel/core": "^7.24.4",
diff --git a/packages/fxa-admin-server/package.json b/packages/fxa-admin-server/package.json
index 1bfc6de95d..4075aa74f3 100644
--- a/packages/fxa-admin-server/package.json
+++ b/packages/fxa-admin-server/package.json
@@ -44,7 +44,7 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "fxa-auth-client": "workspace:*",
     "fxa-shared": "workspace:*",
     "googleapis": "^143.0.0",
diff --git a/packages/fxa-content-server/package.json b/packages/fxa-content-server/package.json
index f43efcc38c..f149604e64 100644
--- a/packages/fxa-content-server/package.json
+++ b/packages/fxa-content-server/package.json
@@ -62,7 +62,7 @@
     "css-loader": "1.0.0",
     "duration-js": "4.0.0",
     "expose-loader": "5.0.0",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "extract-loader": "5.1.0",
     "fast-text-encoding": "^1.0.4",
     "file-loader": "^6.2.0",
@@ -119,7 +119,7 @@
     "postcss-cli": "11.0.0",
     "postcss-loader": "8.1.1",
     "sass-loader": "^14.2.1",
-    "serve-static": "^1.14.2",
+    "serve-static": "^1.16.0",
     "source-map": "^0.7.3",
     "source-map-loader": "^5.0.0",
     "stream-browserify": "^3.0.0",
diff --git a/packages/fxa-event-broker/package.json b/packages/fxa-event-broker/package.json
index 6280c88be6..303a6586ae 100644
--- a/packages/fxa-event-broker/package.json
+++ b/packages/fxa-event-broker/package.json
@@ -40,7 +40,7 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "fxa-shared": "workspace:*",
     "hot-shots": "^10.0.0",
     "joi": "^17.8.3",
diff --git a/packages/fxa-graphql-api/package.json b/packages/fxa-graphql-api/package.json
index 02e056273c..ef2d6c2ec3 100644
--- a/packages/fxa-graphql-api/package.json
+++ b/packages/fxa-graphql-api/package.json
@@ -43,7 +43,7 @@
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
     "eslint-config-react-app": "^7.0.1",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "fxa-auth-client": "workspace:*",
     "fxa-auth-server": "workspace:*",
     "fxa-profile-server": "workspace:*",
diff --git a/packages/fxa-payments-server/package.json b/packages/fxa-payments-server/package.json
index 94e7e2fb81..8b0b5f4dcd 100644
--- a/packages/fxa-payments-server/package.json
+++ b/packages/fxa-payments-server/package.json
@@ -132,7 +132,7 @@
     "convict-format-with-validator": "^6.2.0",
     "dayjs": "^1.11.5",
     "eslint-plugin-jest": "^27.6.0",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "fxa-auth-server": "workspace:*",
     "fxa-geodb": "workspace:*",
     "fxa-react": "workspace:*",
@@ -157,7 +157,7 @@
     "redux": "^4.2.0",
     "redux-promise-middleware": "^6.2.0",
     "redux-thunk": "^2.4.1",
-    "serve-static": "^1.14.2",
+    "serve-static": "^1.16.0",
     "typedi": "^0.8.0",
     "uuid": "^10.0.0"
   },
diff --git a/packages/fxa-settings/package.json b/packages/fxa-settings/package.json
index 8ee0af5412..8234b9a79b 100644
--- a/packages/fxa-settings/package.json
+++ b/packages/fxa-settings/package.json
@@ -161,7 +161,7 @@
     "jest-watch-typeahead": "^1.0.0",
     "lodash.groupby": "^4.6.0",
     "mini-css-extract-plugin": "^2.9.0",
-    "postcss": "^8.4.43",
+    "postcss": "^8.4.44",
     "postcss-flexbugs-fixes": "^5.0.2",
     "postcss-loader": "^8.1.1",
     "postcss-normalize": "^10.0.1",
diff --git a/packages/fxa-shared/package.json b/packages/fxa-shared/package.json
index 32387d5ac8..91b7c57d68 100644
--- a/packages/fxa-shared/package.json
+++ b/packages/fxa-shared/package.json
@@ -296,7 +296,7 @@
     "celebrate": "^15.0.1",
     "cldr-localenames-full": "43.1.0",
     "cors": "^2.8.5",
-    "express": "^4.20.0",
+    "express": "^4.21.0",
     "find-up": "^5.0.0",
     "graphql": "^16.9.0",
     "hot-shots": "^10.0.0",
diff --git a/yarn.lock b/yarn.lock
index 8023a7d520..640899dd28 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -15,7 +15,7 @@ __metadata:
     convict-format-with-validator: ^6.2.0
     cookie-session: ^2.1.0
     eslint: ^7.32.0
-    express: ^4.20.0
+    express: ^4.21.0
     ioredis: ^5.0.6
     morgan: ^1.10.0
     pm2: ^5.3.0
@@ -30122,7 +30122,7 @@ __metadata:
     convict-format-with-moment: ^6.2.0
     convict-format-with-validator: ^6.2.0
     eslint: ^7.32.0
-    express: ^4.20.0
+    express: ^4.21.0
     fxa-shared: "workspace:*"
     intel: 1.2.0
     mocha: ^10.4.0
@@ -38048,9 +38048,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"express@npm:^4.20.0":
-  version: 4.20.0
-  resolution: "express@npm:4.20.0"
+"express@npm:^4.21.0":
+  version: 4.21.0
+  resolution: "express@npm:4.21.0"
   dependencies:
     accepts: ~1.3.8
     array-flatten: 1.1.1
@@ -38064,7 +38064,7 @@ __metadata:
     encodeurl: ~2.0.0
     escape-html: ~1.0.3
     etag: ~1.8.1
-    finalhandler: 1.2.0
+    finalhandler: 1.3.1
     fresh: 0.5.2
     http-errors: 2.0.0
     merge-descriptors: 1.0.3
@@ -38073,17 +38073,17 @@ __metadata:
     parseurl: ~1.3.3
     path-to-regexp: 0.1.10
     proxy-addr: ~2.0.7
-    qs: 6.11.0
+    qs: 6.13.0
     range-parser: ~1.2.1
     safe-buffer: 5.2.1
     send: 0.19.0
-    serve-static: 1.16.0
+    serve-static: 1.16.2
     setprototypeof: 1.2.0
     statuses: 2.0.1
     type-is: ~1.6.18
     utils-merge: 1.0.1
     vary: ~1.1.2
-  checksum: faa11bffa16be97b26d9f38187e569378c01cad0b92fbd02094fb4e35a224dc5177cc9cc6849141702da80d2d8cbe857c60a7e622e8106695405dc27e38fb3ee
+  checksum: 1c5212993f665809c249bf00ab550b989d1365a5b9171cdfaa26d93ee2ef10cd8add520861ec8d5da74b3194d8374e1d9d53e85ef69b89fd9c4196b87045a5d4
   languageName: node
   linkType: hard
 
@@ -38886,6 +38886,21 @@ __metadata:
   languageName: node
   linkType: hard
 
+"finalhandler@npm:1.3.1":
+  version: 1.3.1
+  resolution: "finalhandler@npm:1.3.1"
+  dependencies:
+    debug: 2.6.9
+    encodeurl: ~2.0.0
+    escape-html: ~1.0.3
+    on-finished: 2.4.1
+    parseurl: ~1.3.3
+    statuses: 2.0.1
+    unpipe: ~1.0.0
+  checksum: a8c58cd97c9cd47679a870f6833a7b417043f5a288cd6af6d0f49b476c874a506100303a128b6d3b654c3d74fa4ff2ffed68a48a27e8630cda5c918f2977dcf4
+  languageName: node
+  linkType: hard
+
 "finalhandler@npm:~1.1.2":
   version: 1.1.2
   resolution: "finalhandler@npm:1.1.2"
@@ -39519,7 +39534,7 @@ __metadata:
     client-sessions: 0.8.x
     ejs: ^3.1.10
     eslint: ^7.32.0
-    express: ^4.20.0
+    express: ^4.21.0
     fxa-shared: "workspace:*"
     morgan: ^1.10.0
     pm2: ^5.3.0
@@ -39942,7 +39957,7 @@ fsevents@~2.1.1:
     eslint-plugin-import: ^2.30.0
     eslint-plugin-jest: ^27.6.0
     eslint-plugin-react: ^7.32.2
-    express: ^4.20.0
+    express: ^4.21.0
     express-http-proxy: ^2.0.0
     fxa-admin-server: "workspace:*"
     fxa-react: "workspace:*"
@@ -39959,7 +39974,7 @@ fsevents@~2.1.1:
     prettier: ^2.3.1
     react-router-dom: ^6.26.0
     react-scripts: ^5.0.1
-    serve-static: ^1.14.2
+    serve-static: ^1.16.0
     supertest: ^7.0.0
     tailwindcss: 3.4.3
     tailwindcss-textshadow: ^2.1.3
@@ -39990,7 +40005,7 @@ fsevents@~2.1.1:
     eslint: ^8.18.0
     eslint-config-react-app: ^7.0.1
     eslint-plugin-prettier: ^4.2.1
-    express: ^4.20.0
+    express: ^4.21.0
     fxa-auth-client: "workspace:*"
     fxa-shared: "workspace:*"
     googleapis: ^143.0.0
@@ -40237,7 +40252,7 @@ fsevents@~2.1.1:
     esbuild-register: ^3.5.0
     eslint: ^7.32.0
     expose-loader: 5.0.0
-    express: ^4.20.0
+    express: ^4.21.0
     extract-loader: 5.1.0
     fast-text-encoding: ^1.0.4
     file-loader: ^6.2.0
@@ -40314,7 +40329,7 @@ fsevents@~2.1.1:
     request: ^2.88.2
     request-promise: 4.2.6
     sass-loader: ^14.2.1
-    serve-static: ^1.14.2
+    serve-static: ^1.16.0
     sinon: 4.5.0
     sinon-chai: ^4.0.0
     sinon-express-mock: ^2.2.1
@@ -40425,7 +40440,7 @@ fsevents@~2.1.1:
     eslint-config-prettier: ^9.1.0
     eslint-config-react-app: ^7.0.1
     eslint-plugin-import: ^2.30.0
-    express: ^4.20.0
+    express: ^4.21.0
     factory-bot-ts: ^0.1.5
     fxa-shared: "workspace:*"
     hot-shots: ^10.0.0
@@ -40496,7 +40511,7 @@ fsevents@~2.1.1:
     esbuild-register: ^3.5.0
     eslint: ^7.32.0
     eslint-config-react-app: ^7.0.1
-    express: ^4.20.0
+    express: ^4.21.0
     fxa-auth-client: "workspace:*"
     fxa-auth-server: "workspace:*"
     fxa-profile-server: "workspace:*"
@@ -40595,7 +40610,7 @@ fsevents@~2.1.1:
     eslint-plugin-import: ^2.30.0
     eslint-plugin-jest: ^27.6.0
     eslint-plugin-react: ^7.32.2
-    express: ^4.20.0
+    express: ^4.21.0
     express-http-proxy: ^2.0.0
     fxa-auth-server: "workspace:*"
     fxa-geodb: "workspace:*"
@@ -40634,7 +40649,7 @@ fsevents@~2.1.1:
     redux-devtools-extension: ^2.13.9
     redux-promise-middleware: ^6.2.0
     redux-thunk: ^2.4.1
-    serve-static: ^1.14.2
+    serve-static: ^1.16.0
     sinon: ^9.0.3
     storybook: ^7.0.23
     storybook-addon-mock: 4.2.1
@@ -40846,7 +40861,7 @@ fsevents@~2.1.1:
     nx: 18.3.1
     persistgraphql: ^0.3.11
     pm2: ^5.3.0
-    postcss: ^8.4.43
+    postcss: ^8.4.44
     postcss-assets: ^6.0.0
     postcss-flexbugs-fixes: ^5.0.2
     postcss-import: ^16.1.0
@@ -40927,7 +40942,7 @@ fsevents@~2.1.1:
     esbuild: ^0.17.15
     esbuild-register: ^3.5.0
     eslint: ^7.32.0
-    express: ^4.20.0
+    express: ^4.21.0
     find-up: ^5.0.0
     graphql: ^16.9.0
     hot-shots: ^10.0.0
@@ -41120,7 +41135,7 @@ fsevents@~2.1.1:
     passport-jwt: ^4.0.1
     persistgraphql: ^0.3.11
     pm2: ^5.3.0
-    postcss: 8.4.43
+    postcss: 8.4.44
     prettier: ^2.6.2
     react: 18.3.1
     react-dom: 18.3.1
@@ -57784,14 +57799,14 @@ fsevents@~2.1.1:
   languageName: node
   linkType: hard
 
-"postcss@npm:8.4.43":
-  version: 8.4.43
-  resolution: "postcss@npm:8.4.43"
+"postcss@npm:8.4.44":
+  version: 8.4.44
+  resolution: "postcss@npm:8.4.44"
   dependencies:
     nanoid: ^3.3.7
     picocolors: ^1.0.1
     source-map-js: ^1.2.0
-  checksum: d88f413e22f03c469547222993b41fa5d05678c6c50d1f8f4fa2e9fcf00c4f00ac54c51c08ea896ff24a9d0d78519e9f1d906708e062064f35c70b16a160ebde
+  checksum: 64d9ce78253696bb64e608a54b362c9ddb537d3b38b58223ebce8260d6110d4e798ef1b3d57d8c28131417d9809187fd51d5c4263113536363444f8635e11bdb
   languageName: node
   linkType: hard
 
@@ -57883,7 +57898,7 @@ fsevents@~2.1.1:
   languageName: node
   linkType: hard
 
-"postcss@npm:^8.4.43":
+"postcss@npm:^8.4.44":
   version: 8.4.45
   resolution: "postcss@npm:8.4.45"
   dependencies:
@@ -61894,27 +61909,6 @@ resolve@1.1.7:
   languageName: node
   linkType: hard
 
-"send@npm:0.17.2":
-  version: 0.17.2
-  resolution: "send@npm:0.17.2"
-  dependencies:
-    debug: 2.6.9
-    depd: ~1.1.2
-    destroy: ~1.0.4
-    encodeurl: ~1.0.2
-    escape-html: ~1.0.3
-    etag: ~1.8.1
-    fresh: 0.5.2
-    http-errors: 1.8.1
-    mime: 1.6.0
-    ms: 2.1.3
-    on-finished: ~2.3.0
-    range-parser: ~1.2.1
-    statuses: ~1.5.0
-  checksum: c28f36deb4ccba9b8d6e6a1e472b8e7c40a1f51575bdf8f67303568cc9e71131faa3adc36fdb72611616ccad1584358bbe4c3ebf419e663ecc5de868ad3d3f03
-  languageName: node
-  linkType: hard
-
 "send@npm:0.18.0":
   version: 0.18.0
   resolution: "send@npm:0.18.0"
@@ -62070,27 +62064,15 @@ resolve@1.1.7:
   languageName: node
   linkType: hard
 
-"serve-static@npm:1.16.0":
-  version: 1.16.0
-  resolution: "serve-static@npm:1.16.0"
+"serve-static@npm:1.16.2, serve-static@npm:^1.16.0":
+  version: 1.16.2
+  resolution: "serve-static@npm:1.16.2"
   dependencies:
-    encodeurl: ~1.0.2
+    encodeurl: ~2.0.0
     escape-html: ~1.0.3
     parseurl: ~1.3.3
-    send: 0.18.0
-  checksum: a479dfe7e9fa7e8cb3ceccb0d944a3c72bb8f88d78472e30989f58fe15a92cfc909ab05a5c7cda2d1a6aa2663ab503ad1e2f40653740346e53e72b3ba41b6951
-  languageName: node
-  linkType: hard
-
-"serve-static@npm:^1.14.2":
-  version: 1.14.2
-  resolution: "serve-static@npm:1.14.2"
-  dependencies:
-    encodeurl: ~1.0.2
-    escape-html: ~1.0.3
-    parseurl: ~1.3.3
-    send: 0.17.2
-  checksum: d97f3183b1dfcd8ce9c0e37e18e87fd31147ed6c8ee0b2c3a089d795e44ee851ca5061db01574f806d54f4e4b70bc694d9ca64578653514e04a28cbc97a1de05
+    send: 0.19.0
+  checksum: dffc52feb4cc5c68e66d0c7f3c1824d4e989f71050aefc9bd5f822a42c54c9b814f595fc5f2b717f4c7cc05396145f3e90422af31186a93f76cf15f707019759
   languageName: node
   linkType: hard