chore(deps): bump the npm_and_yarn group with 2 updates

Bumps the npm_and_yarn group with 2 updates: [jose](https://github.com/panva/jose) and [express](https://github.com/expressjs/express).


Updates `jose` from 5.9.3 to 5.9.4
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/panva/jose/compare/v5.9.3...v5.9.4)

Updates `express` from 4.21.0 to 4.21.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.0...4.21.1)

---
updated-dependencies:
- dependency-name: jose
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

package.json

@@ -95,7 +95,7 @@
     "graphql-request": "^6.1.0",
     "hot-shots": "^10.1.1",
     "husky": "^4.2.5",
-    "jose": "^5.9.3",
+    "jose": "^5.9.4",
     "knex": "^3.1.0",
     "kysely": "^0.27.2",
     "lint-staged": "^15.2.0",

packages/123done/package.json

@@ -23,7 +23,7 @@
     "convict": "^6.2.4",
     "convict-format-with-validator": "^6.2.0",
     "cookie-session": "^2.1.0",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "ioredis": "^5.0.6",
     "morgan": "^1.10.0",
     "request": "^2.88.2"

packages/browserid-verifier/package.json

@@ -19,7 +19,7 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "intel": "1.2.0",
     "morgan": "^1.10.0",
     "mozlog": "^3.0.2",

packages/fortress/package.json

@@ -22,7 +22,7 @@
   "dependencies": {
     "client-sessions": "0.8.x",
     "ejs": "^3.1.10",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "morgan": "^1.10.0"
   },
   "devDependencies": {

packages/fxa-admin-panel/package.json

@@ -41,7 +41,7 @@
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
     "dateformat": "^4.6.3",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "express-http-proxy": "^2.0.0",
     "fxa-admin-server": "workspace:*",
     "fxa-react": "workspace:*",

packages/fxa-admin-server/package.json

@@ -44,7 +44,7 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "fxa-auth-client": "workspace:*",
     "fxa-shared": "workspace:*",
     "googleapis": "^143.0.0",

packages/fxa-auth-server/package.json

@@ -98,7 +98,7 @@
     "i18n-iso-countries": "^7.12.0",
     "ioredis": "^4.28.2",
     "joi": "^17.8.3",
-    "jose": "^5.9.3",
+    "jose": "^5.9.4",
     "jsdom": "^24.1.1",
     "jsonwebtoken": "^9.0.0",
     "jwks-rsa": "^3.1.0",

packages/fxa-content-server/package.json

@@ -62,7 +62,7 @@
     "css-loader": "1.0.0",
     "duration-js": "4.0.0",
     "expose-loader": "5.0.0",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "extract-loader": "5.1.0",
     "fast-text-encoding": "^1.0.4",
     "file-loader": "^6.2.0",

packages/fxa-event-broker/package.json

@@ -40,7 +40,7 @@
     "convict": "^6.2.4",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "fxa-shared": "workspace:*",
     "hot-shots": "^10.1.1",
     "joi": "^17.8.3",

packages/fxa-graphql-api/package.json

@@ -43,7 +43,7 @@
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
     "eslint-config-react-app": "^7.0.1",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "fxa-auth-client": "workspace:*",
     "fxa-auth-server": "workspace:*",
     "fxa-profile-server": "workspace:*",

packages/fxa-payments-server/package.json

@@ -132,7 +132,7 @@
     "convict-format-with-validator": "^6.2.0",
     "dayjs": "^1.11.5",
     "eslint-plugin-jest": "^27.6.0",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "fxa-auth-server": "workspace:*",
     "fxa-geodb": "workspace:*",
     "fxa-react": "workspace:*",

packages/fxa-shared/package.json

@@ -296,7 +296,7 @@
     "celebrate": "^15.0.1",
     "cldr-localenames-full": "43.1.0",
     "cors": "^2.8.5",
-    "express": "^4.21.0",
+    "express": "^4.21.1",
     "find-up": "^5.0.0",
     "graphql": "^16.9.0",
     "hot-shots": "^10.1.1",

yarn.lock

@@ -15,7 +15,7 @@ __metadata:
     convict-format-with-validator: ^6.2.0
     cookie-session: ^2.1.0
     eslint: ^7.32.0
-    express: ^4.21.0
+    express: ^4.21.1
     ioredis: ^5.0.6
     morgan: ^1.10.0
     pm2: ^5.4.2
@@ -31123,7 +31123,7 @@ __metadata:
     convict-format-with-moment: ^6.2.0
     convict-format-with-validator: ^6.2.0
     eslint: ^7.32.0
-    express: ^4.21.0
+    express: ^4.21.1
     fxa-shared: "workspace:*"
     intel: 1.2.0
     mocha: ^10.4.0
@@ -33841,6 +33841,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"cookie@npm:0.7.1":
+  version: 0.7.1
+  resolution: "cookie@npm:0.7.1"
+  checksum: cec5e425549b3650eb5c3498a9ba3cde0b9cd419e3b36e4b92739d30b4d89e0b678b98c1ddc209ce7cf958cd3215671fd6ac47aec21f10c2a0cc68abd399d8a7
+  languageName: node
+  linkType: hard
+
 "cookiejar@npm:^2.1.4":
   version: 2.1.4
   resolution: "cookiejar@npm:2.1.4"
@@ -39083,16 +39090,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"express@npm:^4.21.0":
+"express@npm:^4.21.1":
-  version: 4.21.0
+  version: 4.21.1
-  resolution: "express@npm:4.21.0"
+  resolution: "express@npm:4.21.1"
   dependencies:
     accepts: ~1.3.8
     array-flatten: 1.1.1
     body-parser: 1.20.3
     content-disposition: 0.5.4
     content-type: ~1.0.4
-    cookie: 0.6.0
+    cookie: 0.7.1
     cookie-signature: 1.0.6
     debug: 2.6.9
     depd: 2.0.0
@@ -39118,7 +39125,7 @@ __metadata:
     type-is: ~1.6.18
     utils-merge: 1.0.1
     vary: ~1.1.2
-  checksum: 1c5212993f665809c249bf00ab550b989d1365a5b9171cdfaa26d93ee2ef10cd8add520861ec8d5da74b3194d8374e1d9d53e85ef69b89fd9c4196b87045a5d4
+  checksum: 5ac2b26d8aeddda5564fc0907227d29c100f90c0ead2ead9d474dc5108e8fb306c2de2083c4e3ba326e0906466f2b73417dbac16961f4075ff9f03785fd940fe
   languageName: node
   linkType: hard
 
@@ -40571,7 +40578,7 @@ __metadata:
     client-sessions: 0.8.x
     ejs: ^3.1.10
     eslint: ^7.32.0
-    express: ^4.21.0
+    express: ^4.21.1
     fxa-shared: "workspace:*"
     morgan: ^1.10.0
     pm2: ^5.4.2
@@ -40994,7 +41001,7 @@ fsevents@~2.1.1:
     eslint-plugin-import: ^2.30.0
     eslint-plugin-jest: ^27.6.0
     eslint-plugin-react: ^7.32.2
-    express: ^4.21.0
+    express: ^4.21.1
     express-http-proxy: ^2.0.0
     fxa-admin-server: "workspace:*"
     fxa-react: "workspace:*"
@@ -41042,7 +41049,7 @@ fsevents@~2.1.1:
     eslint: ^8.18.0
     eslint-config-react-app: ^7.0.1
     eslint-plugin-prettier: ^4.2.1
-    express: ^4.21.0
+    express: ^4.21.1
     fxa-auth-client: "workspace:*"
     fxa-shared: "workspace:*"
     googleapis: ^143.0.0
@@ -41174,7 +41181,7 @@ fsevents@~2.1.1:
     i18n-iso-countries: ^7.12.0
     ioredis: ^4.28.2
     joi: ^17.8.3
-    jose: ^5.9.3
+    jose: ^5.9.4
     jsdom: ^24.1.1
     jsonwebtoken: ^9.0.0
     jsxgettext-recursive-next: 1.1.0
@@ -41289,7 +41296,7 @@ fsevents@~2.1.1:
     esbuild-register: ^3.5.0
     eslint: ^7.32.0
     expose-loader: 5.0.0
-    express: ^4.21.0
+    express: ^4.21.1
     extract-loader: 5.1.0
     fast-text-encoding: ^1.0.4
     file-loader: ^6.2.0
@@ -41477,7 +41484,7 @@ fsevents@~2.1.1:
     eslint-config-prettier: ^9.1.0
     eslint-config-react-app: ^7.0.1
     eslint-plugin-import: ^2.30.0
-    express: ^4.21.0
+    express: ^4.21.1
     factory-bot-ts: ^0.1.5
     fxa-shared: "workspace:*"
     hot-shots: ^10.1.1
@@ -41548,7 +41555,7 @@ fsevents@~2.1.1:
     esbuild-register: ^3.5.0
     eslint: ^7.32.0
     eslint-config-react-app: ^7.0.1
-    express: ^4.21.0
+    express: ^4.21.1
     fxa-auth-client: "workspace:*"
     fxa-auth-server: "workspace:*"
     fxa-profile-server: "workspace:*"
@@ -41647,7 +41654,7 @@ fsevents@~2.1.1:
     eslint-plugin-import: ^2.30.0
     eslint-plugin-jest: ^27.6.0
     eslint-plugin-react: ^7.32.2
-    express: ^4.21.0
+    express: ^4.21.1
     express-http-proxy: ^2.0.0
     fxa-auth-server: "workspace:*"
     fxa-geodb: "workspace:*"
@@ -41981,7 +41988,7 @@ fsevents@~2.1.1:
     esbuild: ^0.17.15
     esbuild-register: ^3.5.0
     eslint: ^7.32.0
-    express: ^4.21.0
+    express: ^4.21.1
     find-up: ^5.0.0
     graphql: ^16.9.0
     hot-shots: ^10.1.1
@@ -42147,7 +42154,7 @@ fsevents@~2.1.1:
     jest: ^29.5.0
     jest-environment-jsdom: ^29.5.0
     jest-environment-node: ^29.7.0
-    jose: ^5.9.3
+    jose: ^5.9.4
     json: ^11.0.0
     knex: ^3.1.0
     kysely: ^0.27.2
@@ -49463,10 +49470,10 @@ fsevents@~2.1.1:
   languageName: node
   linkType: hard
 
-"jose@npm:^5.9.3":
+"jose@npm:^5.9.4":
-  version: 5.9.3
+  version: 5.9.4
-  resolution: "jose@npm:5.9.3"
+  resolution: "jose@npm:5.9.4"
-  checksum: d128f2b90daf76f14eb22a81528e4f1cd99aa73613ae9d7edad69479c0ae9c29d571108e21d6ac33c3892de7bea24c4a4b99b4eb63354ebe566683c719ee334e
+  checksum: d1c3dd0fb6dbfb6c16e0904f4930b9df1abde784d137b0987777b7722798b39b4ab15e6aff7b768195018f1656618a368d04b758c318436ad482a2a7ae92db82
   languageName: node
   linkType: hard