build(deps): bump path-to-regexp, express and @vercel/node (#772)

Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to
6.3.0 and updates ancestor dependencies
[path-to-regexp](https://github.com/pillarjs/path-to-regexp),
[express](https://github.com/expressjs/express) and
[@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node).
These dependencies need to be updated together.

Updates `path-to-regexp` from 0.1.10 to 6.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pillarjs/path-to-regexp/releases">path-to-regexp's
releases</a>.</em></p>
<blockquote>
<h2>Fix backtracking in 6.x</h2>
<p><strong>Fixed</strong></p>
<ul>
<li>Add backtrack protection to 6.x (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/324">#324</a>)
f1253b4</li>
</ul>
<p><a
href="https://github.com/pillarjs/path-to-regexp/compare/v6.2.2...v6.3.0">https://github.com/pillarjs/path-to-regexp/compare/v6.2.2...v6.3.0</a></p>
<h2>Updated README</h2>
<p>No API changes. Documentation only release.</p>
<p><strong>Changed</strong></p>
<ul>
<li>Fix readme example  c7ec332</li>
<li>Update shield URL  e828000</li>
</ul>
<p><a
href="https://github.com/pillarjs/path-to-regexp/compare/v6.2.1...v6.2.2">https://github.com/pillarjs/path-to-regexp/compare/v6.2.1...v6.2.2</a></p>
<h2>Fix matching <code>:name*</code> parameter</h2>
<p><strong>Fixed</strong></p>
<ul>
<li>Fix invalid matching of <code>:name*</code> parameter (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/261">#261</a>)
762bc6b</li>
<li>Compare delimiter string over regexp  86baef8</li>
</ul>
<p><strong>Added</strong></p>
<ul>
<li>New example in documentation (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/256">#256</a>)
ae9e576</li>
<li>Update demo link (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/250">#250</a>)
77df638</li>
<li>Update README encode example  b39edd4</li>
</ul>
<p><a
href="https://github.com/pillarjs/path-to-regexp/compare/v6.2.0...v6.2.1">https://github.com/pillarjs/path-to-regexp/compare/v6.2.0...v6.2.1</a></p>
<h2>Named Capturing Groups</h2>
<p><strong>Added</strong></p>
<ul>
<li>Support named capturing groups for RegExps (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/225">#225</a>)</li>
</ul>
<p><strong>Fixed</strong></p>
<ul>
<li>Update <code>strict</code> flag documentation (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/227">#227</a>)</li>
<li>Ignore test files when bundling (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/220">#220</a>)</li>
</ul>
<h2>Use <code>/#?</code> as Default Delimiter</h2>
<p><strong>Fixed</strong></p>
<ul>
<li>Use <code>/#?</code> as default delimiter to avoid matching on query
or fragment parameters
<ul>
<li>If you are matching non-paths (e.g. hostnames), you can adjust
<code>delimiter: '.'</code></li>
</ul>
</li>
</ul>
<h2>Custom Prefix and Suffix Groups</h2>
<p>This release reverts the prefix behavior added in v3 back to the
behavior seen in v2. For the most part, path matching is backward
compatible with v2 with these enhancements:</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pillarjs/path-to-regexp/blob/master/History.md">path-to-regexp's
changelog</a>.</em></p>
<blockquote>
<h1>Moved to <a
href="https://github.com/pillarjs/path-to-regexp/releases">GitHub
Releases</a></h1>
<h2>3.0.0 / 2019-01-13</h2>
<ul>
<li>Always use prefix character as delimiter token, allowing any
character to be a delimiter (e.g.
<code>/:att1-:att2-:att3-:att4-:att5</code>)</li>
<li>Remove <code>partial</code> support, prefer escaping the prefix
delimiter explicitly (e.g.
<code>\\/(apple-)?icon-:res(\\d+).png</code>)</li>
</ul>
<h2>2.4.0 / 2018-08-26</h2>
<ul>
<li>Support <code>start</code> option to disable anchoring from
beginning of the string</li>
</ul>
<h2>2.3.0 / 2018-08-20</h2>
<ul>
<li>Use <code>delimiter</code> when processing repeated matching groups
(e.g. <code>foo/bar</code> has no prefix, but has a delimiter)</li>
</ul>
<h2>2.2.1 / 2018-04-24</h2>
<ul>
<li>Allow empty string with <code>end: false</code> to match both
relative and absolute paths</li>
</ul>
<h2>2.2.0 / 2018-03-06</h2>
<ul>
<li>Pass <code>token</code> as second argument to <code>encode</code>
option (e.g. <code>encode(value, token)</code>)</li>
</ul>
<h2>2.1.0 / 2017-10-20</h2>
<ul>
<li>Handle non-ending paths where the final character is a delimiter
<ul>
<li>E.g. <code>/foo/</code> before required either <code>/foo/</code> or
<code>/foo//</code> to match in non-ending mode</li>
</ul>
</li>
</ul>
<h2>2.0.0 / 2017-08-23</h2>
<ul>
<li>New option! Ability to set <code>endsWith</code> to match paths like
<code>/test?query=string</code> up to the query string</li>
<li>New option! Set <code>delimiters</code> for specific characters to
be treated as parameter prefixes (e.g. <code>/:test</code>)</li>
<li>Remove <code>isarray</code> dependency</li>
<li>Explicitly handle trailing delimiters instead of trimming them (e.g.
<code>/test/</code> is now treated as <code>/test/</code> instead of
<code>/test</code> when matching)</li>
<li>Remove overloaded <code>keys</code> argument that accepted
<code>options</code></li>
<li>Remove <code>keys</code> list attached to the <code>RegExp</code>
output</li>
<li>Remove asterisk functionality (it's a real pain to properly
encode)</li>
<li>Change <code>tokensToFunction</code> (e.g. <code>compile</code>) to
accept an <code>encode</code> function for pretty encoding (e.g. pass
your own implementation)</li>
</ul>
<h2>1.7.0 / 2016-11-08</h2>
<ul>
<li>Allow a <code>delimiter</code> option to be passed in with
<code>tokensToRegExp</code> which will be used for
&quot;non-ending&quot; token match situations</li>
</ul>
<h2>1.6.0 / 2016-10-03</h2>
<ul>
<li>Populate <code>RegExp.keys</code> when using the
<code>tokensToRegExp</code> method (making it consistent with the main
export)</li>
<li>Allow a <code>delimiter</code> option to be passed in with
<code>parse</code></li>
<li>Updated TypeScript definition with <code>Keys</code> and
<code>Options</code> updated</li>
</ul>
<h2>1.5.3 / 2016-06-15</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/75a92c3d7c42159f459ab42f346899152906ea8c"><code>75a92c3</code></a>
6.3.0</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/f1253b47b347dcb909e3e80b0eb2649109e59894"><code>f1253b4</code></a>
Add backtrack protection to 6.x (<a
href="https://redirect.github.com/pillarjs/path-to-regexp/issues/324">#324</a>)</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/28a5b27bb9e7f09dddb573ac50923f2337ea0dbf"><code>28a5b27</code></a>
6.2.2</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/270876d30b77c83b16c7bb01b578ae9e278c3faa"><code>270876d</code></a>
Test on min node 16</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/d5a42b69ae5fc128f85783714bbf08408d1560ee"><code>d5a42b6</code></a>
Run tests on ubuntu</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/1c265a158c8ffc8c4fb490fc1a9a5020b147d1f2"><code>1c265a1</code></a>
Upgrade dev deps, prettier format</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/c7ec332e87d8560673884d5629e1cb23cb03cb87"><code>c7ec332</code></a>
Fix readme example</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/25da491127d5dfd13eb5ad839bd3559622b77c56"><code>25da491</code></a>
Bump node v14 for tests</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/980d1db9b82fc85019c30da6e689df3beb27e12b"><code>980d1db</code></a>
Add v8 coverage</li>
<li><a
href="https://github.com/pillarjs/path-to-regexp/commit/e8280006c80604baaf18e8572a983d2a265a6e83"><code>e828000</code></a>
Update shield URL</li>
<li>Additional commits viewable in <a
href="https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v6.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `express` from 4.21.1 to 4.21.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/releases">express's
releases</a>.</em></p>
<blockquote>
<h2>4.21.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add funding field (v4) by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6065">expressjs/express#6065</a></li>
<li>deps: [email protected] by <a
href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5956">expressjs/express#5956</a></li>
<li>deps: bump [email protected] by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6209">expressjs/express#6209</a></li>
<li>Release: 4.21.2 by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6094">expressjs/express#6094</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/express/compare/4.21.1...4.21.2">https://github.com/expressjs/express/compare/4.21.1...4.21.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/blob/4.21.2/History.md">express's
changelog</a>.</em></p>
<blockquote>
<h1>4.21.2 / 2024-11-06</h1>
<ul>
<li>deps: [email protected]
<ul>
<li>Fix backtracking protection</li>
</ul>
</li>
<li>deps: [email protected]
<ul>
<li>Throws an error on invalid path values</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/expressjs/express/commit/1faf228935aa0a13111f92c28ee795be64ce3f0f"><code>1faf228</code></a>
4.21.2</li>
<li><a
href="https://github.com/expressjs/express/commit/2e0fb646d03184dd9a5285813460210c0e7ae654"><code>2e0fb64</code></a>
deps: bump [email protected] (<a
href="https://redirect.github.com/expressjs/express/issues/6209">#6209</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/59fc27028ec5d212be653d35d7e3f73a2c3ac3c0"><code>59fc270</code></a>
deps: [email protected] (<a
href="https://redirect.github.com/expressjs/express/issues/5956">#5956</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/51fc39ccf834eec44547b0f4fed8027e7c05a009"><code>51fc39c</code></a>
docs: add funding (<a
href="https://redirect.github.com/expressjs/express/issues/6065">#6065</a>)</li>
<li>See full diff in <a
href="https://github.com/expressjs/express/compare/4.21.1...4.21.2">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~jonchurch">jonchurch</a>, a new releaser
for express since your current version.</p>
</details>
<br />

Updates `@vercel/node` from 3.2.25 to 4.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/vercel/releases"><code>@​vercel/node</code>'s
releases</a>.</em></p>
<blockquote>
<h2><code>@​vercel/node</code><a
href="https://github.com/4"><code>@​4</code></a>.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>update path-to-regexp (<a
href="https://redirect.github.com/vercel/vercel/pull/12734">#12734</a>)</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/7c3114ff8a1bdf0933c008a83e46c3d8f6dfcf7d"><code>7c3114ff8a1bdf0933c008a83e46c3d8f6dfcf7d</code></a>]:
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.8.0</li>
</ul>
</li>
</ul>
<h2><code>@​vercel/node</code><a
href="https://github.com/3"><code>@​3</code></a>.2.29</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>update express even more (<a
href="https://redirect.github.com/vercel/vercel/pull/12703">#12703</a>)</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/a35f77e5dddc4faa6c4492b2b3c6971e7200749e"><code>a35f77e5dddc4faa6c4492b2b3c6971e7200749e</code></a>]:</p>
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.7.0</li>
</ul>
</li>
</ul>
<h2><code>@​vercel/node</code><a
href="https://github.com/3"><code>@​3</code></a>.2.28</h2>
<h3>Patch Changes</h3>
<ul>
<li>[cli] bump express version (<a
href="https://redirect.github.com/vercel/vercel/pull/12689">#12689</a>)</li>
</ul>
<h2><code>@​vercel/node</code><a
href="https://github.com/3"><code>@​3</code></a>.2.27</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/d5474ec05886abfb2fc5dd69c54072a7c34498b5"><code>d5474ec05886abfb2fc5dd69c54072a7c34498b5</code></a>]:
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.6.0</li>
</ul>
</li>
</ul>
<h2><code>@​vercel/node</code><a
href="https://github.com/3"><code>@​3</code></a>.2.26</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/a97f3f13ea3f27fd143e7692544bbd4919771a7a"><code>a97f3f13ea3f27fd143e7692544bbd4919771a7a</code></a>]:
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.5.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md"><code>@​vercel/node</code>'s
changelog</a>.</em></p>
<blockquote>
<h2>4.0.0</h2>
<h3>Major Changes</h3>
<ul>
<li>update path-to-regexp (<a
href="https://redirect.github.com/vercel/vercel/pull/12734">#12734</a>)</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/7c3114ff8a1bdf0933c008a83e46c3d8f6dfcf7d"><code>7c3114ff8a1bdf0933c008a83e46c3d8f6dfcf7d</code></a>]:
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.8.0</li>
</ul>
</li>
</ul>
<h2>3.2.29</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>update express even more (<a
href="https://redirect.github.com/vercel/vercel/pull/12703">#12703</a>)</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/a35f77e5dddc4faa6c4492b2b3c6971e7200749e"><code>a35f77e5dddc4faa6c4492b2b3c6971e7200749e</code></a>]:</p>
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.7.0</li>
</ul>
</li>
</ul>
<h2>3.2.28</h2>
<h3>Patch Changes</h3>
<ul>
<li>[cli] bump express version (<a
href="https://redirect.github.com/vercel/vercel/pull/12689">#12689</a>)</li>
</ul>
<h2>3.2.27</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/d5474ec05886abfb2fc5dd69c54072a7c34498b5"><code>d5474ec05886abfb2fc5dd69c54072a7c34498b5</code></a>]:
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.6.0</li>
</ul>
</li>
</ul>
<h2>3.2.26</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/vercel/vercel/commit/a97f3f13ea3f27fd143e7692544bbd4919771a7a"><code>a97f3f13ea3f27fd143e7692544bbd4919771a7a</code></a>]:
<ul>
<li><code>@​vercel/build-utils</code><a
href="https://github.com/8"><code>@​8</code></a>.5.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vercel/vercel/commit/0ea23410454dd626b542c4e5792c3351e6995d93"><code>0ea2341</code></a>
Version Packages (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12725">#12725</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/0c4ce9cfbf0c6d3108656584d56fa501e3efe15e"><code>0c4ce9c</code></a>
[node][routing-utils] Update path-to-regexp to v6.3.0 (internal) (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12734">#12734</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/b964d544e437708636ce189ca9147b56bfac8c34"><code>b964d54</code></a>
bump cookie and sentry/node (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12739">#12739</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/d6560aed4c10c18e697c34b3563b4685beec0803"><code>d6560ae</code></a>
Version Packages (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12706">#12706</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/318b5dc77157fa0f6942296407e97251197467fa"><code>318b5dc</code></a>
[cli][node] update express even more (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12703">#12703</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/0f9de88f63da970e69eebf21fb1190e43f3f0851"><code>0f9de88</code></a>
Version Packages (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12664">#12664</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/a3a359845da2504c081f449e7dece217f31ad064"><code>a3a3598</code></a>
move node bench to individual scripts folder (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12697">#12697</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/37a806737cf030befd2eaefcf11d573a133ff9dc"><code>37a8067</code></a>
[cli] bump express version (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12689">#12689</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/b05124875636c0b8652428018968bbdde3ff8ecb"><code>b051248</code></a>
Version Packages (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12648">#12648</a>)</li>
<li><a
href="https://github.com/vercel/vercel/commit/595541f5a24faf60727e062a9e66a90797fcda79"><code>595541f</code></a>
Version Packages (<a
href="https://github.com/vercel/vercel/tree/HEAD/packages/node/issues/12620">#12620</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/vercel/commits/@vercel/[email protected]/packages/node">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/wip/app/network/alerts).

</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

package.json

@@ -25,7 +25,7 @@
   },
   "devDependencies": {
     "@sinonjs/fake-timers": "^13.0.5",
-    "@vercel/node": "^3.2.25",
+    "@vercel/node": "^4.0.0",
     "lodash.clonedeep": "^4.5.0",
     "nock": "^14.0.0",
     "prettier": "^3.3.3",