From 7523e8bb0be4d9f15b05fa104ccc5ae663d3ee89 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 1 Dec 2025 21:16:08 +0000
Subject: [PATCH] Update dependency express to ^5.2.0 [SECURITY]

---
 package-lock.json            | 13 +++++++------
 packages/server/package.json |  4 ++--
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 8ec1ec12..2eece34a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7492,18 +7492,19 @@
       }
     },
     "node_modules/express": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/express/-/express-5.1.0.tgz",
-      "integrity": "sha512-DT9ck5YIRU+8GYzzU5kT3eHGA5iL+1Zd0EutOmTE9Dtk+Tvuzd23VBU+ec7HPNSTxXYO55gPV/hq4pSBJDjFpA==",
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+      "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^2.0.0",
-        "body-parser": "^2.2.0",
+        "body-parser": "^2.2.1",
         "content-disposition": "^1.0.0",
         "content-type": "^1.0.5",
         "cookie": "^0.7.1",
         "cookie-signature": "^1.2.1",
         "debug": "^4.4.0",
+        "depd": "^2.0.0",
         "encodeurl": "^2.0.0",
         "escape-html": "^1.0.3",
         "etag": "^1.8.1",
@@ -16088,7 +16089,7 @@
     },
     "packages/server": {
       "name": "@stanlemon/server",
-      "version": "0.4.19",
+      "version": "0.4.20",
       "license": "MIT",
       "dependencies": {
         "@stanlemon/webdev": "*",
@@ -16096,7 +16097,7 @@
         "compression": "^1.8.1",
         "cookie-parser": "^1.4.7",
         "dotenv": "^17.2.3",
-        "express": "^5.1.0",
+        "express": "^5.2.0",
         "express-rate-limit": "^8.2.1",
         "helmet": "^8.1.0",
         "http-proxy-middleware": "^3.0.5",
diff --git a/packages/server/package.json b/packages/server/package.json
index dc916c34..8da9705a 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stanlemon/server",
-  "version": "0.4.19",
+  "version": "0.4.20",
   "description": "A basic express web server setup.",
   "author": "Stan Lemon <stanlemon@users.noreply.github.com>",
   "license": "MIT",
@@ -24,7 +24,7 @@
     "compression": "^1.8.1",
     "cookie-parser": "^1.4.7",
     "dotenv": "^17.2.3",
-    "express": "^5.1.0",
+    "express": "^5.2.0",
     "express-rate-limit": "^8.2.1",
     "helmet": "^8.1.0",
     "http-proxy-middleware": "^3.0.5",