From 492745d89d0667b943055bac36823f76ea52aece Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 15 Sep 2026 17:41:14 +0000
Subject: [PATCH] chore: update dependency express to ^4.22.3

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 examples/express-composition/package.json     |  2 +-
 examples/lb3-application/package.json         |  2 +-
 examples/passport-login/package.json          |  2 +-
 examples/rpc-server/package.json              |  2 +-
 .../authentication-passport/package.json      |  2 +-
 extensions/graphql/package.json               |  2 +-
 extensions/metrics/package.json               |  2 +-
 fixtures/mock-oauth2-provider/package.json    |  2 +-
 package-lock.json                             | 58 +++++++------------
 packages/express/package.json                 |  2 +-
 packages/rest-explorer/package.json           |  2 +-
 packages/rest/package.json                    |  2 +-
 packages/testlab/package.json                 |  2 +-
 13 files changed, 33 insertions(+), 49 deletions(-)

diff --git a/examples/express-composition/package.json b/examples/express-composition/package.json
index 371b889c11d0..329851777c4a 100644
--- a/examples/express-composition/package.json
+++ b/examples/express-composition/package.json
@@ -53,7 +53,7 @@
     "@loopback/rest": "^15.0.16",
     "@loopback/rest-explorer": "^8.0.16",
     "@loopback/service-proxy": "^8.0.15",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "tslib": "^2.8.1"
   },
   "devDependencies": {
diff --git a/examples/lb3-application/package.json b/examples/lb3-application/package.json
index 6ac164783626..757a108abdac 100644
--- a/examples/lb3-application/package.json
+++ b/examples/lb3-application/package.json
@@ -56,7 +56,7 @@
     "compression": "^1.8.1",
     "cors": "^2.8.6",
     "debug": "^4.4.3",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "helmet": "^4.6.0",
     "loopback": "^3.28.0",
     "loopback-boot": "^3.3.1",
diff --git a/examples/passport-login/package.json b/examples/passport-login/package.json
index 2dba4d1c19fc..87b4b26357d7 100644
--- a/examples/passport-login/package.json
+++ b/examples/passport-login/package.json
@@ -71,7 +71,7 @@
     "body-parser": "^2.3.0",
     "client-sessions": "^0.8.0",
     "debug": "^4.4.3",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "express-session": "^1.19.0",
     "lodash": "^4.18.1",
     "passport": "^0.7.0",
diff --git a/examples/rpc-server/package.json b/examples/rpc-server/package.json
index 6508dfdf5aab..1adf521ce496 100644
--- a/examples/rpc-server/package.json
+++ b/examples/rpc-server/package.json
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@loopback/core": "^7.0.15",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "tslib": "^2.8.1"
   },
   "devDependencies": {
diff --git a/extensions/authentication-passport/package.json b/extensions/authentication-passport/package.json
index 22e771ac6e78..5fd063afb2fe 100644
--- a/extensions/authentication-passport/package.json
+++ b/extensions/authentication-passport/package.json
@@ -68,7 +68,7 @@
     "@types/qs": "^6.15.1",
     "axios": "^1.16.0",
     "body-parser": "^2.3.0",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "form-data": "^4.0.6",
     "jsonwebtoken": "^9.0.3",
     "lodash": "^4.18.1",
diff --git a/extensions/graphql/package.json b/extensions/graphql/package.json
index 1f6988070862..91f843853ec9 100644
--- a/extensions/graphql/package.json
+++ b/extensions/graphql/package.json
@@ -51,7 +51,7 @@
     "body-parser": "^2.3.0",
     "cors": "^2.8.6",
     "debug": "^4.4.3",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "graphql": "^16.14.2",
     "graphql-ws": "^5.16.2",
     "type-graphql": "^2.0.0-rc.2",
diff --git a/extensions/metrics/package.json b/extensions/metrics/package.json
index 02d4ff4e7753..b66caed7921d 100644
--- a/extensions/metrics/package.json
+++ b/extensions/metrics/package.json
@@ -54,6 +54,6 @@
     "@loopback/testlab": "^8.0.15",
     "@types/express": "^4.17.25",
     "@types/node": "^20.19.43",
-    "express": "^4.22.2"
+    "express": "^4.22.3"
   }
 }
diff --git a/fixtures/mock-oauth2-provider/package.json b/fixtures/mock-oauth2-provider/package.json
index 5fdb05c9168b..3335511446ac 100644
--- a/fixtures/mock-oauth2-provider/package.json
+++ b/fixtures/mock-oauth2-provider/package.json
@@ -42,7 +42,7 @@
     "@types/node": "^20.19.43",
     "axios": "^1.16.0",
     "body-parser": "^2.3.0",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "form-data": "^4.0.6",
     "jsonwebtoken": "^9.0.3",
     "lodash": "^4.18.1",
diff --git a/package-lock.json b/package-lock.json
index 08262cba1fbf..f4a41f4d3086 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -482,7 +482,7 @@
         "@loopback/rest": "^15.0.16",
         "@loopback/rest-explorer": "^8.0.16",
         "@loopback/service-proxy": "^8.0.15",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "tslib": "^2.8.1"
       },
       "devDependencies": {
@@ -740,7 +740,7 @@
         "compression": "^1.8.1",
         "cors": "^2.8.6",
         "debug": "^4.4.3",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "helmet": "^4.6.0",
         "loopback": "^3.28.0",
         "loopback-boot": "^3.3.1",
@@ -935,7 +935,7 @@
         "body-parser": "^2.3.0",
         "client-sessions": "^0.8.0",
         "debug": "^4.4.3",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "express-session": "^1.19.0",
         "lodash": "^4.18.1",
         "passport": "^0.7.0",
@@ -1082,7 +1082,7 @@
       "license": "MIT",
       "dependencies": {
         "@loopback/core": "^7.0.15",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "tslib": "^2.8.1"
       },
       "devDependencies": {
@@ -1561,7 +1561,7 @@
         "@types/qs": "^6.15.1",
         "axios": "^1.16.0",
         "body-parser": "^2.3.0",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "form-data": "^4.0.6",
         "jsonwebtoken": "^9.0.3",
         "lodash": "^4.18.1",
@@ -1690,7 +1690,7 @@
         "body-parser": "^2.3.0",
         "cors": "^2.8.6",
         "debug": "^4.4.3",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "graphql": "^16.14.2",
         "graphql-ws": "^5.16.2",
         "type-graphql": "^2.0.0-rc.2",
@@ -1839,7 +1839,7 @@
         "@loopback/testlab": "^8.0.15",
         "@types/express": "^4.17.25",
         "@types/node": "^20.19.43",
-        "express": "^4.22.2"
+        "express": "^4.22.3"
       },
       "engines": {
         "node": "22 || 24 || 26"
@@ -2046,7 +2046,7 @@
         "@types/node": "^20.19.43",
         "axios": "^1.16.0",
         "body-parser": "^2.3.0",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "form-data": "^4.0.6",
         "jsonwebtoken": "^9.0.3",
         "lodash": "^4.18.1",
@@ -15956,9 +15956,9 @@
       "integrity": "sha512-dX7e/LHVJ6W3DE1MHWi9S1EYzDESENfLrYohG2G++ovZrYOkm4Knwa0mc1cn84xJOR4KEU0WSchhLbd0UklbHw=="
     },
     "node_modules/express": {
-      "version": "4.22.2",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
-      "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
+      "version": "4.22.3",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.3.tgz",
+      "integrity": "sha512-Bdcs4+3qlpVlx2NRn6fgX2Ue2/gGRaPeawebgclM0ERSCqDpA+owF1fdPwjJUTAJWMTuAaxjDf+hzb0/4eKvvw==",
       "license": "MIT",
       "dependencies": {
         "accepts": "~1.3.8",
@@ -15980,9 +15980,9 @@
         "methods": "~1.1.2",
         "on-finished": "~2.4.1",
         "parseurl": "~1.3.3",
-        "path-to-regexp": "~0.1.12",
+        "path-to-regexp": "~0.1.13",
         "proxy-addr": "~2.0.7",
-        "qs": "~6.15.1",
+        "qs": "~6.16.0",
         "range-parser": "~1.2.1",
         "safe-buffer": "5.2.1",
         "send": "~0.19.0",
@@ -16069,9 +16069,9 @@
       "license": "MIT"
     },
     "node_modules/express/node_modules/body-parser": {
-      "version": "1.20.5",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.5.tgz",
-      "integrity": "sha512-3grm+/2tUOvu2cjJkvsIxrv/wVpfXQW4PsQHYm7yk4vfpu7Ekl6nEsYBoJUL6qDwZUx8wUhQ8tR2qz+ad9c9OA==",
+      "version": "1.20.8",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.8.tgz",
+      "integrity": "sha512-JNcyFQ64OiijEkPzUBTCe+hyPXUD/3LEldGQ6iF5LR1w00mx9o7xtDWHXBY2iItjdCFGoilOLNQbH943ut7pHA==",
       "license": "MIT",
       "dependencies": {
         "bytes": "~3.1.2",
@@ -16082,7 +16082,7 @@
         "http-errors": "~2.0.1",
         "iconv-lite": "~0.4.24",
         "on-finished": "~2.4.1",
-        "qs": "~6.15.1",
+        "qs": "~6.16.0",
         "raw-body": "~2.5.3",
         "type-is": "~1.6.18",
         "unpipe": "~1.0.0"
@@ -16122,22 +16122,6 @@
       "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
       "license": "MIT"
     },
-    "node_modules/express/node_modules/qs": {
-      "version": "6.15.3",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
-      "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "es-define-property": "^1.0.1",
-        "side-channel": "^1.1.1"
-      },
-      "engines": {
-        "node": ">=0.6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/ljharb"
-      }
-    },
     "node_modules/express/node_modules/raw-body": {
       "version": "2.5.3",
       "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
@@ -40615,7 +40599,7 @@
         "@types/http-errors": "^2.0.5",
         "body-parser": "^2.3.0",
         "debug": "^4.4.3",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "http-errors": "^2.0.1",
         "on-finished": "^2.4.1",
         "toposort": "^2.0.2",
@@ -41201,7 +41185,7 @@
         "body-parser": "^2.3.0",
         "cors": "^2.8.6",
         "debug": "^4.4.3",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "http-errors": "^2.0.1",
         "js-yaml": "^4.3.2",
         "json-schema-compare": "^0.2.2",
@@ -41300,7 +41284,7 @@
         "@types/ejs": "^3.1.5",
         "@types/express": "^4.17.25",
         "@types/node": "^20.19.43",
-        "express": "^4.22.2"
+        "express": "^4.22.3"
       },
       "engines": {
         "node": "22 || 24 || 26"
@@ -41445,7 +41429,7 @@
         "@types/shot": "^4.0.5",
         "@types/sinon": "^22.0.0",
         "@types/supertest": "^2.0.16",
-        "express": "^4.22.2",
+        "express": "^4.22.3",
         "fs-extra": "^11.4.0",
         "oas-validator": "^5.0.8",
         "should": "^13.2.3",
diff --git a/packages/express/package.json b/packages/express/package.json
index 478b7d9655c2..58ba6e77b2c6 100644
--- a/packages/express/package.json
+++ b/packages/express/package.json
@@ -47,7 +47,7 @@
     "@types/http-errors": "^2.0.5",
     "body-parser": "^2.3.0",
     "debug": "^4.4.3",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "http-errors": "^2.0.1",
     "on-finished": "^2.4.1",
     "toposort": "^2.0.2",
diff --git a/packages/rest-explorer/package.json b/packages/rest-explorer/package.json
index d5e5792597a5..e7666c72ede1 100644
--- a/packages/rest-explorer/package.json
+++ b/packages/rest-explorer/package.json
@@ -55,6 +55,6 @@
     "@types/ejs": "^3.1.5",
     "@types/express": "^4.17.25",
     "@types/node": "^20.19.43",
-    "express": "^4.22.2"
+    "express": "^4.22.3"
   }
 }
diff --git a/packages/rest/package.json b/packages/rest/package.json
index b4a8c2af7d15..a309a164a363 100644
--- a/packages/rest/package.json
+++ b/packages/rest/package.json
@@ -57,7 +57,7 @@
     "body-parser": "^2.3.0",
     "cors": "^2.8.6",
     "debug": "^4.4.3",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "http-errors": "^2.0.1",
     "js-yaml": "^4.3.2",
     "json-schema-compare": "^0.2.2",
diff --git a/packages/testlab/package.json b/packages/testlab/package.json
index d8b0b9be5fa3..faf1d2d6d44b 100644
--- a/packages/testlab/package.json
+++ b/packages/testlab/package.json
@@ -40,7 +40,7 @@
     "@types/shot": "^4.0.5",
     "@types/sinon": "^22.0.0",
     "@types/supertest": "^2.0.16",
-    "express": "^4.22.2",
+    "express": "^4.22.3",
     "fs-extra": "^11.4.0",
     "oas-validator": "^5.0.8",
     "should": "^13.2.3",