chore(deps): bump the npm_and_yarn group with 3 updates

Bumps the npm_and_yarn group with 3 updates: [postcss](https://github.com/postcss/postcss), [express](https://github.com/expressjs/express) and [body-parser](https://github.com/expressjs/body-parser). Updates `postcss` from 8.4.42 to 8.4.43 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.4.42...8.4.43) Updates `express` from 4.19.2 to 4.20.0 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0) Updates `body-parser` from 1.20.1 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](https://github.com/expressjs/body-parser/compare/1.20.1...1.20.3) --- updated-dependencies: - dependency-name: postcss dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
2024-09-11 18:00:14 +00:00 · 2024-09-11 18:00:14 +00:00 · 6d19636775
--- a/package.json
+++ b/package.json
@ -234,7 +234,7 @@
    "nx": "19.5.3",
    "nx-cloud": "19.0.0",
    "persistgraphql": "^0.3.11",
-    "postcss": "8.4.42",
+    "postcss": "8.4.43",
    "react-test-renderer": "^18.3.1",
    "reflect-metadata": "^0.2.1",
    "server-only": "^0.0.1",
--- a/packages/123done/package.json
+++ b/packages/123done/package.json
@ -23,7 +23,7 @@
    "convict": "^6.2.4",
    "convict-format-with-validator": "^6.2.0",
    "cookie-session": "^2.1.0",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "ioredis": "^5.0.6",
    "morgan": "^1.10.0",
    "request": "^2.88.2"
--- a/packages/browserid-verifier/package.json
+++ b/packages/browserid-verifier/package.json
@ -13,13 +13,13 @@
  "main": "lib/server.js",
  "dependencies": {
    "async": "3.2.4",
-    "body-parser": "^1.20.1",
+    "body-parser": "^1.20.3",
    "browserid-local-verify": "0.5.2",
    "compute-cluster": "0.0.9",
    "convict": "^6.2.4",
    "convict-format-with-moment": "^6.2.0",
    "convict-format-with-validator": "^6.2.0",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "intel": "1.2.0",
    "morgan": "^1.10.0",
    "mozlog": "^3.0.2",
--- a/packages/fortress/package.json
+++ b/packages/fortress/package.json
@ -22,7 +22,7 @@
  "dependencies": {
    "client-sessions": "0.8.x",
    "ejs": "^3.1.10",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "morgan": "^1.10.0"
  },
  "devDependencies": {
--- a/packages/fxa-admin-panel/package.json
+++ b/packages/fxa-admin-panel/package.json
@ -36,12 +36,12 @@
    ]
  },
  "dependencies": {
-    "body-parser": "^1.20.1",
+    "body-parser": "^1.20.3",
    "convict": "^6.2.4",
    "convict-format-with-moment": "^6.2.0",
    "convict-format-with-validator": "^6.2.0",
    "dateformat": "^4.6.3",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "express-http-proxy": "^2.0.0",
    "fxa-admin-server": "workspace:*",
    "fxa-react": "workspace:*",
--- a/packages/fxa-admin-server/package.json
+++ b/packages/fxa-admin-server/package.json
@ -44,7 +44,7 @@
    "convict": "^6.2.4",
    "convict-format-with-moment": "^6.2.0",
    "convict-format-with-validator": "^6.2.0",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "fxa-auth-client": "workspace:*",
    "fxa-shared": "workspace:*",
    "googleapis": "^143.0.0",
--- a/packages/fxa-content-server/package.json
+++ b/packages/fxa-content-server/package.json
@ -48,7 +48,7 @@
    "backbone": "^1.6.0",
    "backbone.cocktail": "0.5.15",
    "base32-decode": "1.0.0",
-    "body-parser": "^1.20.1",
+    "body-parser": "^1.20.3",
    "browserify-zlib": "^0.2.0",
    "buffer": "^6.0.3",
    "cache-loader": "^4.1.0",
@ -62,7 +62,7 @@
    "css-loader": "1.0.0",
    "duration-js": "4.0.0",
    "expose-loader": "5.0.0",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "extract-loader": "5.1.0",
    "fast-text-encoding": "^1.0.4",
    "file-loader": "^6.2.0",
--- a/packages/fxa-event-broker/package.json
+++ b/packages/fxa-event-broker/package.json
@ -40,7 +40,7 @@
    "convict": "^6.2.4",
    "convict-format-with-moment": "^6.2.0",
    "convict-format-with-validator": "^6.2.0",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "fxa-shared": "workspace:*",
    "hot-shots": "^10.0.0",
    "joi": "^17.8.3",
--- a/packages/fxa-graphql-api/package.json
+++ b/packages/fxa-graphql-api/package.json
@ -37,13 +37,13 @@
  "homepage": "https://github.com/mozilla/fxa#readme",
  "readmeFilename": "README.md",
  "dependencies": {
-    "body-parser": "^1.20.2",
+    "body-parser": "^1.20.3",
    "commander": "^6.0.0",
    "convict": "^6.2.4",
    "convict-format-with-moment": "^6.2.0",
    "convict-format-with-validator": "^6.2.0",
    "eslint-config-react-app": "^7.0.1",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "fxa-auth-client": "workspace:*",
    "fxa-auth-server": "workspace:*",
    "fxa-profile-server": "workspace:*",
--- a/packages/fxa-payments-server/package.json
+++ b/packages/fxa-payments-server/package.json
@ -132,7 +132,7 @@
    "convict-format-with-validator": "^6.2.0",
    "dayjs": "^1.11.5",
    "eslint-plugin-jest": "^27.6.0",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "fxa-auth-server": "workspace:*",
    "fxa-geodb": "workspace:*",
    "fxa-react": "workspace:*",
--- a/packages/fxa-settings/package.json
+++ b/packages/fxa-settings/package.json
@ -161,7 +161,7 @@
    "jest-watch-typeahead": "^1.0.0",
    "lodash.groupby": "^4.6.0",
    "mini-css-extract-plugin": "^2.9.0",
-    "postcss": "^8.4.42",
+    "postcss": "^8.4.43",
    "postcss-flexbugs-fixes": "^5.0.2",
    "postcss-loader": "^8.1.1",
    "postcss-normalize": "^10.0.1",
--- a/packages/fxa-shared/package.json
+++ b/packages/fxa-shared/package.json
@ -296,7 +296,7 @@
    "celebrate": "^15.0.1",
    "cldr-localenames-full": "43.1.0",
    "cors": "^2.8.5",
-    "express": "^4.19.2",
+    "express": "^4.20.0",
    "find-up": "^5.0.0",
    "graphql": "^16.9.0",
    "hot-shots": "^10.0.0",
--- a/yarn.lock
+++ b/yarn.lock
@ -15,7 +15,7 @@ __metadata:
    convict-format-with-validator: ^6.2.0
    cookie-session: ^2.1.0
    eslint: ^7.32.0
-    express: ^4.19.2
+    express: ^4.20.0
    ioredis: ^5.0.6
    morgan: ^1.10.0
    pm2: ^5.3.0
@ -29850,7 +29850,7 @@ __metadata:
  languageName: node
  linkType: hard

-"body-parser@npm:1.20.2, body-parser@npm:^1.20.2":
+"body-parser@npm:1.20.2":
  version: 1.20.2
  resolution: "body-parser@npm:1.20.2"
  dependencies:
@ -29870,23 +29870,23 @@ __metadata:
  languageName: node
  linkType: hard

-"body-parser@npm:^1.20.1":
-  version: 1.20.1
-  resolution: "body-parser@npm:1.20.1"
+"body-parser@npm:1.20.3, body-parser@npm:^1.20.3":
+  version: 1.20.3
+  resolution: "body-parser@npm:1.20.3"
  dependencies:
    bytes: 3.1.2
-    content-type: ~1.0.4
+    content-type: ~1.0.5
    debug: 2.6.9
    depd: 2.0.0
    destroy: 1.2.0
    http-errors: 2.0.0
    iconv-lite: 0.4.24
    on-finished: 2.4.1
-    qs: 6.11.0
-    raw-body: 2.5.1
+    qs: 6.13.0
+    raw-body: 2.5.2
    type-is: ~1.6.18
    unpipe: 1.0.0
-  checksum: f1050dbac3bede6a78f0b87947a8d548ce43f91ccc718a50dd774f3c81f2d8b04693e52acf62659fad23101827dd318da1fb1363444ff9a8482b886a3e4a5266
+  checksum: 1a35c59a6be8d852b00946330141c4f142c6af0f970faa87f10ad74f1ee7118078056706a05ae3093c54dabca9cd3770fa62a170a85801da1a4324f04381167d
  languageName: node
  linkType: hard

@ -30115,14 +30115,14 @@ __metadata:
  dependencies:
    async: 3.2.4
    audit-filter: 0.5.0
-    body-parser: ^1.20.1
+    body-parser: ^1.20.3
    browserid-local-verify: 0.5.2
    compute-cluster: 0.0.9
    convict: ^6.2.4
    convict-format-with-moment: ^6.2.0
    convict-format-with-validator: ^6.2.0
    eslint: ^7.32.0
-    express: ^4.19.2
+    express: ^4.20.0
    fxa-shared: "workspace:*"
    intel: 1.2.0
    mocha: ^10.4.0
@ -35622,6 +35622,13 @@ __metadata:
  languageName: node
  linkType: hard

+"encodeurl@npm:~2.0.0":
+  version: 2.0.0
+  resolution: "encodeurl@npm:2.0.0"
+  checksum: abf5cd51b78082cf8af7be6785813c33b6df2068ce5191a40ca8b1afe6a86f9230af9a9ce694a5ce4665955e5c1120871826df9c128a642e09c58d592e2807fe
+  languageName: node
+  linkType: hard
+
 "encoding@npm:^0.1.11, encoding@npm:^0.1.12, encoding@npm:~0.1.7":
  version: 0.1.12
  resolution: "encoding@npm:0.1.12"
@ -38041,6 +38048,45 @@ __metadata:
  languageName: node
  linkType: hard

+"express@npm:^4.20.0":
+  version: 4.20.0
+  resolution: "express@npm:4.20.0"
+  dependencies:
+    accepts: ~1.3.8
+    array-flatten: 1.1.1
+    body-parser: 1.20.3
+    content-disposition: 0.5.4
+    content-type: ~1.0.4
+    cookie: 0.6.0
+    cookie-signature: 1.0.6
+    debug: 2.6.9
+    depd: 2.0.0
+    encodeurl: ~2.0.0
+    escape-html: ~1.0.3
+    etag: ~1.8.1
+    finalhandler: 1.2.0
+    fresh: 0.5.2
+    http-errors: 2.0.0
+    merge-descriptors: 1.0.3
+    methods: ~1.1.2
+    on-finished: 2.4.1
+    parseurl: ~1.3.3
+    path-to-regexp: 0.1.10
+    proxy-addr: ~2.0.7
+    qs: 6.11.0
+    range-parser: ~1.2.1
+    safe-buffer: 5.2.1
+    send: 0.19.0
+    serve-static: 1.16.0
+    setprototypeof: 1.2.0
+    statuses: 2.0.1
+    type-is: ~1.6.18
+    utils-merge: 1.0.1
+    vary: ~1.1.2
+  checksum: faa11bffa16be97b26d9f38187e569378c01cad0b92fbd02094fb4e35a224dc5177cc9cc6849141702da80d2d8cbe857c60a7e622e8106695405dc27e38fb3ee
+  languageName: node
+  linkType: hard
+
 "express@npm:~4.17.1":
  version: 4.17.1
  resolution: "express@npm:4.17.1"
@ -39473,7 +39519,7 @@ __metadata:
    client-sessions: 0.8.x
    ejs: ^3.1.10
    eslint: ^7.32.0
-    express: ^4.19.2
+    express: ^4.20.0
    fxa-shared: "workspace:*"
    morgan: ^1.10.0
    pm2: ^5.3.0
@ -39885,7 +39931,7 @@ fsevents@~2.1.1:
    "@types/supertest": ^2.0.11
    "@typescript-eslint/eslint-plugin": ^5.59.0
    "@typescript-eslint/parser": ^7.1.1
-    body-parser: ^1.20.1
+    body-parser: ^1.20.3
    chance: ^1.1.8
    convict: ^6.2.4
    convict-format-with-moment: ^6.2.0
@ -39896,7 +39942,7 @@ fsevents@~2.1.1:
    eslint-plugin-import: ^2.30.0
    eslint-plugin-jest: ^27.6.0
    eslint-plugin-react: ^7.32.2
-    express: ^4.19.2
+    express: ^4.20.0
    express-http-proxy: ^2.0.0
    fxa-admin-server: "workspace:*"
    fxa-react: "workspace:*"
@ -39944,7 +39990,7 @@ fsevents@~2.1.1:
    eslint: ^8.18.0
    eslint-config-react-app: ^7.0.1
    eslint-plugin-prettier: ^4.2.1
-    express: ^4.19.2
+    express: ^4.20.0
    fxa-auth-client: "workspace:*"
    fxa-shared: "workspace:*"
    googleapis: ^143.0.0
@ -40170,7 +40216,7 @@ fsevents@~2.1.1:
    backbone: ^1.6.0
    backbone.cocktail: 0.5.15
    base32-decode: 1.0.0
-    body-parser: ^1.20.1
+    body-parser: ^1.20.3
    browserify-zlib: ^0.2.0
    buffer: ^6.0.3
    cache-loader: ^4.1.0
@ -40191,7 +40237,7 @@ fsevents@~2.1.1:
    esbuild-register: ^3.5.0
    eslint: ^7.32.0
    expose-loader: 5.0.0
-    express: ^4.19.2
+    express: ^4.20.0
    extract-loader: 5.1.0
    fast-text-encoding: ^1.0.4
    file-loader: ^6.2.0
@ -40379,7 +40425,7 @@ fsevents@~2.1.1:
    eslint-config-prettier: ^9.1.0
    eslint-config-react-app: ^7.0.1
    eslint-plugin-import: ^2.30.0
-    express: ^4.19.2
+    express: ^4.20.0
    factory-bot-ts: ^0.1.5
    fxa-shared: "workspace:*"
    hot-shots: ^10.0.0
@ -40440,7 +40486,7 @@ fsevents@~2.1.1:
    "@types/supertest": ^2.0.11
    "@types/yargs": ^17.0.0
    audit-filter: ^0.5.0
-    body-parser: ^1.20.2
+    body-parser: ^1.20.3
    chance: ^1.1.8
    commander: ^6.0.0
    convict: ^6.2.4
@ -40450,7 +40496,7 @@ fsevents@~2.1.1:
    esbuild-register: ^3.5.0
    eslint: ^7.32.0
    eslint-config-react-app: ^7.0.1
-    express: ^4.19.2
+    express: ^4.20.0
    fxa-auth-client: "workspace:*"
    fxa-auth-server: "workspace:*"
    fxa-profile-server: "workspace:*"
@ -40549,7 +40595,7 @@ fsevents@~2.1.1:
    eslint-plugin-import: ^2.30.0
    eslint-plugin-jest: ^27.6.0
    eslint-plugin-react: ^7.32.2
-    express: ^4.19.2
+    express: ^4.20.0
    express-http-proxy: ^2.0.0
    fxa-auth-server: "workspace:*"
    fxa-geodb: "workspace:*"
@ -40800,7 +40846,7 @@ fsevents@~2.1.1:
    nx: 18.3.1
    persistgraphql: ^0.3.11
    pm2: ^5.3.0
-    postcss: ^8.4.42
+    postcss: ^8.4.43
    postcss-assets: ^6.0.0
    postcss-flexbugs-fixes: ^5.0.2
    postcss-import: ^16.1.0
@ -40881,7 +40927,7 @@ fsevents@~2.1.1:
    esbuild: ^0.17.15
    esbuild-register: ^3.5.0
    eslint: ^7.32.0
-    express: ^4.19.2
+    express: ^4.20.0
    find-up: ^5.0.0
    graphql: ^16.9.0
    hot-shots: ^10.0.0
@ -41074,7 +41120,7 @@ fsevents@~2.1.1:
    passport-jwt: ^4.0.1
    persistgraphql: ^0.3.11
    pm2: ^5.3.0
-    postcss: 8.4.42
+    postcss: 8.4.43
    prettier: ^2.6.2
    react: 18.3.1
    react-dom: 18.3.1
@ -51038,6 +51084,13 @@ fsevents@~2.1.1:
  languageName: node
  linkType: hard

+"merge-descriptors@npm:1.0.3":
+  version: 1.0.3
+  resolution: "merge-descriptors@npm:1.0.3"
+  checksum: 52117adbe0313d5defa771c9993fe081e2d2df9b840597e966aadafde04ae8d0e3da46bac7ca4efc37d4d2b839436582659cd49c6a43eacb3fe3050896a105d1
+  languageName: node
+  linkType: hard
+
 "merge-stream@npm:^2.0.0":
  version: 2.0.0
  resolution: "merge-stream@npm:2.0.0"
@ -55536,6 +55589,13 @@ fsevents@~2.1.1:
  languageName: node
  linkType: hard

+"path-to-regexp@npm:0.1.10":
+  version: 0.1.10
+  resolution: "path-to-regexp@npm:0.1.10"
+  checksum: ab7a3b7a0b914476d44030340b0a65d69851af2a0f33427df1476100ccb87d409c39e2182837a96b98fb38c4ef2ba6b87bdad62bb70a2c153876b8061760583c
+  languageName: node
+  linkType: hard
+
 "path-to-regexp@npm:0.1.7":
  version: 0.1.7
  resolution: "path-to-regexp@npm:0.1.7"
@ -57724,14 +57784,14 @@ fsevents@~2.1.1:
  languageName: node
  linkType: hard

-"postcss@npm:8.4.42":
-  version: 8.4.42
-  resolution: "postcss@npm:8.4.42"
+"postcss@npm:8.4.43":
+  version: 8.4.43
+  resolution: "postcss@npm:8.4.43"
  dependencies:
    nanoid: ^3.3.7
    picocolors: ^1.0.1
    source-map-js: ^1.2.0
-  checksum: 78a6ea96611b3c7affbd2e1a9a736ba24084f1f5b6f4fc688621e60ca407612472232af008d478b9e5992329f2dfa00eea4425a727fd46fa1eeabe682545d9dd
+  checksum: d88f413e22f03c469547222993b41fa5d05678c6c50d1f8f4fa2e9fcf00c4f00ac54c51c08ea896ff24a9d0d78519e9f1d906708e062064f35c70b16a160ebde
  languageName: node
  linkType: hard

@ -57823,7 +57883,7 @@ fsevents@~2.1.1:
  languageName: node
  linkType: hard

-"postcss@npm:^8.4.42":
+"postcss@npm:^8.4.43":
  version: 8.4.45
  resolution: "postcss@npm:8.4.45"
  dependencies:
@ -58630,6 +58690,15 @@ fsevents@~2.1.1:
  languageName: node
  linkType: hard

+"qs@npm:6.13.0":
+  version: 6.13.0
+  resolution: "qs@npm:6.13.0"
+  dependencies:
+    side-channel: ^1.0.6
+  checksum: e9404dc0fc2849245107108ce9ec2766cde3be1b271de0bf1021d049dc5b98d1a2901e67b431ac5509f865420a7ed80b7acb3980099fe1c118a1c5d2e1432ad8
+  languageName: node
+  linkType: hard
+
 "qs@npm:6.7.0":
  version: 6.7.0
  resolution: "qs@npm:6.7.0"
@ -58841,18 +58910,6 @@ fsevents@~2.1.1:
  languageName: node
  linkType: hard

-"raw-body@npm:2.5.1":
-  version: 2.5.1
-  resolution: "raw-body@npm:2.5.1"
-  dependencies:
-    bytes: 3.1.2
-    http-errors: 2.0.0
-    iconv-lite: 0.4.24
-    unpipe: 1.0.0
-  checksum: 5362adff1575d691bb3f75998803a0ffed8c64eabeaa06e54b4ada25a0cd1b2ae7f4f5ec46565d1bec337e08b5ac90c76eaa0758de6f72a633f025d754dec29e
-  languageName: node
-  linkType: hard
-
 "raw-body@npm:2.5.2":
  version: 2.5.2
  resolution: "raw-body@npm:2.5.2"
@ -61879,6 +61936,27 @@ resolve@1.1.7:
  languageName: node
  linkType: hard

+"send@npm:0.19.0":
+  version: 0.19.0
+  resolution: "send@npm:0.19.0"
+  dependencies:
+    debug: 2.6.9
+    depd: 2.0.0
+    destroy: 1.2.0
+    encodeurl: ~1.0.2
+    escape-html: ~1.0.3
+    etag: ~1.8.1
+    fresh: 0.5.2
+    http-errors: 2.0.0
+    mime: 1.6.0
+    ms: 2.1.3
+    on-finished: 2.4.1
+    range-parser: ~1.2.1
+    statuses: 2.0.1
+  checksum: 5ae11bd900c1c2575525e2aa622e856804e2f96a09281ec1e39610d089f53aa69e13fd8db84b52f001d0318cf4bb0b3b904ad532fc4c0014eb90d32db0cff55f
+  languageName: node
+  linkType: hard
+
 "sentence-case@npm:^3.0.4":
  version: 3.0.4
  resolution: "sentence-case@npm:3.0.4"
@ -61992,6 +62070,18 @@ resolve@1.1.7:
  languageName: node
  linkType: hard

+"serve-static@npm:1.16.0":
+  version: 1.16.0
+  resolution: "serve-static@npm:1.16.0"
+  dependencies:
+    encodeurl: ~1.0.2
+    escape-html: ~1.0.3
+    parseurl: ~1.3.3
+    send: 0.18.0
+  checksum: a479dfe7e9fa7e8cb3ceccb0d944a3c72bb8f88d78472e30989f58fe15a92cfc909ab05a5c7cda2d1a6aa2663ab503ad1e2f40653740346e53e72b3ba41b6951
+  languageName: node
+  linkType: hard
+
 "serve-static@npm:^1.14.2":
  version: 1.14.2
  resolution: "serve-static@npm:1.14.2"
@ -62397,6 +62487,18 @@ resolve@1.1.7:
  languageName: node
  linkType: hard

+"side-channel@npm:^1.0.6":
+  version: 1.0.6
+  resolution: "side-channel@npm:1.0.6"
+  dependencies:
+    call-bind: ^1.0.7
+    es-errors: ^1.3.0
+    get-intrinsic: ^1.2.4
+    object-inspect: ^1.13.1
+  checksum: bfc1afc1827d712271453e91b7cd3878ac0efd767495fd4e594c4c2afaa7963b7b510e249572bfd54b0527e66e4a12b61b80c061389e129755f34c493aad9b97
+  languageName: node
+  linkType: hard
+
 "sigmund@npm:^1.0.1":
  version: 1.0.1
  resolution: "sigmund@npm:1.0.1"