Bump the dev-dependencies group with 2 updates (#1318)

Bumps the dev-dependencies group with 2 updates:
[express](https://github.com/expressjs/express) and
[nodemon](https://github.com/remy/nodemon).

Updates `express` from 4.21.0 to 5.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/releases">express's
releases</a>.</em></p>
<blockquote>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update captains by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6027">expressjs/express#6027</a></li>
<li>build: Node.js 23.0 by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6075">expressjs/express#6075</a></li>
<li>Add funding field (v5) by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6064">expressjs/express#6064</a></li>
<li>✅ add discarded middleware test by <a
href="https://github.com/ctcpip"><code>@​ctcpip</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/5819">expressjs/express#5819</a></li>
<li>update homepage link http to https by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5920">expressjs/express#5920</a></li>
<li>Improve readme by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/5994">expressjs/express#5994</a></li>
<li>Add bjohansebas as repo captain for expressjs.com by <a
href="https://github.com/crandmck"><code>@​crandmck</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6058">expressjs/express#6058</a></li>
<li>Remove Object.setPrototypeOf polyfill by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6081">expressjs/express#6081</a></li>
<li>fix(buffer): use node:buffer instead of safe-buffer by <a
href="https://github.com/bhavya3024"><code>@​bhavya3024</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6071">expressjs/express#6071</a></li>
<li>docs: Add DCO by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6048">expressjs/express#6048</a></li>
<li>cleanup: remove promise support check from tests by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6148">expressjs/express#6148</a></li>
<li>Use loop for acceptParams by <a
href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6066">expressjs/express#6066</a></li>
<li>Improve documentation step in release process by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6150">expressjs/express#6150</a></li>
<li>cleanup: remove unnecessary require for global Buffer by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6146">expressjs/express#6146</a></li>
<li>cleanup: remove AsyncLocalStorage check by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6147">expressjs/express#6147</a></li>
<li>update history.md for acceptParams change by <a
href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6177">expressjs/express#6177</a></li>
<li>docs: add <a
href="https://github.com/rxmarbles"><code>@​rxmarbles</code></a> to the
triage team by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6151">expressjs/express#6151</a></li>
<li>refactor: improve readability by <a
href="https://github.com/sazk07"><code>@​sazk07</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6173">expressjs/express#6173</a></li>
<li>docs: clarify the security process in the triage role by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6217">expressjs/express#6217</a></li>
<li>chore: replace <code>methods</code> dependency with standard library
by <a href="https://github.com/jonkoops"><code>@​jonkoops</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6196">expressjs/express#6196</a></li>
<li>Remove <code>utils-merge</code> dependency - use spread syntax
instead by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6091">expressjs/express#6091</a></li>
<li>fix(securite): fix vulnerabilities by <a
href="https://github.com/Abdel-Monaam-Aouini"><code>@​Abdel-Monaam-Aouini</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6211">expressjs/express#6211</a></li>
<li>refactor: prefix built-in node module imports by <a
href="https://github.com/slagiewka"><code>@​slagiewka</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6236">expressjs/express#6236</a></li>
<li>fix: remove download size badges by <a
href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6266">expressjs/express#6266</a></li>
<li>Remove unused <code>depd</code> dependency by <a
href="https://github.com/jonkoops"><code>@​jonkoops</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6197">expressjs/express#6197</a></li>
<li>fix: usage of <code>Invalid action input
'persist-credentials'</code> for <code>actions/setup-node@v4</code> in
<code>ci.yml</code> by <a
href="https://github.com/hamirmahal"><code>@​hamirmahal</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6256">expressjs/express#6256</a></li>
<li>Add support for OSSF scorecard reporting by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/5431">expressjs/express#5431</a></li>
<li>docs: add <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> to
the triage team by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6276">expressjs/express#6276</a></li>
<li>fix: added a missing semicolon in css styles in examples/auth by <a
href="https://github.com/pr4j3sh"><code>@​pr4j3sh</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6297">expressjs/express#6297</a></li>
<li>docs: include team email in the security policy by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6278">expressjs/express#6278</a></li>
<li>refactor: simplify <code>normalizeTypes</code> function by <a
href="https://github.com/Ayoub-Mabrouk"><code>@​Ayoub-Mabrouk</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6097">expressjs/express#6097</a></li>
<li>ci: updated github actions ci workflow by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6314">expressjs/express#6314</a></li>
<li>ci: fix npm install --include typo by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6324">expressjs/express#6324</a></li>
<li>ci: updated scorecard actions by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6322">expressjs/express#6322</a></li>
<li>build(deps): use carat notation for dependency versions by <a
href="https://github.com/dpopp07"><code>@​dpopp07</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6317">expressjs/express#6317</a></li>
<li>chore(deps): update <code>debug</code> to ^4.4.0 by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6313">expressjs/express#6313</a></li>
<li>docs: retroactively note 5.0.0-beta.1 api change in history file by
<a href="https://github.com/dpopp07"><code>@​dpopp07</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6333">expressjs/express#6333</a></li>
<li>feat(deps): body-parser@^2.1.0 by <a
href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6332">expressjs/express#6332</a></li>
<li>feat(deps): router@^2.1.0 by <a
href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6331">expressjs/express#6331</a></li>
<li>Update repo captains by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6234">expressjs/express#6234</a></li>
<li>deps: upgrade nyc by <a
href="https://github.com/agungjati"><code>@​agungjati</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6122">expressjs/express#6122</a></li>
<li>fix (deps): update deps by <a
href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6337">expressjs/express#6337</a></li>
<li>response: add support for ETag option in res.sendFile by <a
href="https://github.com/juanarbol"><code>@​juanarbol</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/6073">expressjs/express#6073</a></li>
<li>Update multiple links to use <code>https</code> instead of
<code>http</code> by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6338">expressjs/express#6338</a></li>
<li>Extend res.links() to allow adding multiple links with the same rel
<a
href="https://redirect.github.com/expressjs/express/issues/2729">#2729</a>
by <a href="https://github.com/andvea"><code>@​andvea</code></a> in <a
href="https://redirect.github.com/expressjs/express/pull/4885">expressjs/express#4885</a></li>
<li>docs: update emeritus triagers by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/express/pull/6345">expressjs/express#6345</a></li>
<li>docs: update guidance for triager nominations by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6349">expressjs/express#6349</a></li>
<li>docs: clarify guidelines for becoming a committer by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/express/pull/6364">expressjs/express#6364</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/express/blob/master/History.md">express's
changelog</a>.</em></p>
<blockquote>
<h1>5.1.0 / 2025-03-31</h1>
<ul>
<li>Add support for <code>Uint8Array</code> in
<code>res.send()</code></li>
<li>Add support for ETag option in <code>res.sendFile()</code></li>
<li>Add support for multiple links with the same rel in
<code>res.links()</code></li>
<li>Add funding field to package.json</li>
<li>perf: use loop for acceptParams</li>
<li>refactor: prefix built-in node module imports</li>
<li>deps: remove <code>setprototypeof</code></li>
<li>deps: remove <code>safe-buffer</code></li>
<li>deps: remove <code>utils-merge</code></li>
<li>deps: remove <code>methods</code></li>
<li>deps: remove <code>depd</code></li>
<li>deps: <code>debug@^4.4.0</code></li>
<li>deps: <code>body-parser@^2.2.0</code></li>
<li>deps: <code>router@^2.2.0</code></li>
<li>deps: <code>content-type@^1.0.5</code></li>
<li>deps: <code>finalhandler@^2.1.0</code></li>
<li>deps: <code>qs@^6.14.0</code></li>
<li>deps: <code>[email protected]</code></li>
<li>deps: <code>[email protected]</code></li>
</ul>
<h1>5.0.1 / 2024-10-08</h1>
<ul>
<li>Update <code>cookie</code> semver lock to address <a
href="https://nvd.nist.gov/vuln/detail/CVE-2024-47764">CVE-2024-47764</a></li>
</ul>
<h1>5.0.0 / 2024-09-10</h1>
<ul>
<li>remove:
<ul>
<li><code>path-is-absolute</code> dependency - use
<code>path.isAbsolute</code> instead</li>
</ul>
</li>
<li>breaking:
<ul>
<li><code>res.status()</code> accepts only integers, and input must be
greater than 99 and less than 1000
<ul>
<li>will throw a <code>RangeError: Invalid status code: ${code}. Status
code must be greater than 99 and less than 1000.</code> for inputs
outside this range</li>
<li>will throw a <code>TypeError: Invalid status code: ${code}. Status
code must be an integer.</code> for non integer inputs</li>
</ul>
</li>
<li>deps: [email protected]</li>
<li><code>res.redirect('back')</code> and
<code>res.location('back')</code> is no longer a supported magic string,
explicitly use <code>req.get('Referrer') || '/'</code>.</li>
</ul>
</li>
<li>change:
<ul>
<li><code>res.clearCookie</code> will ignore user provided
<code>maxAge</code> and <code>expires</code> options</li>
</ul>
</li>
<li>deps: cookie-signature@^1.2.1</li>
<li>deps: [email protected]</li>
<li>deps: merge-descriptors@^2.0.0</li>
<li>deps: serve-static@^2.1.0</li>
<li>deps: [email protected]</li>
<li>deps: accepts@^2.0.0</li>
<li>deps: mime-types@^3.0.0
<ul>
<li><code>application/javascript</code> =&gt;
<code>text/javascript</code></li>
</ul>
</li>
<li>deps: type-is@^2.0.0</li>
<li>deps: content-disposition@^1.0.0</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/expressjs/express/commit/cd7d4397c398a3f3ecadeaf9ef6ac1377bd414c4"><code>cd7d439</code></a>
5.1.0</li>
<li><a
href="https://github.com/expressjs/express/commit/4c4f3ea1059319d217dbb8177dfec902d2917424"><code>4c4f3ea</code></a>
fix(deps): serve-static@^2.2.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6418">#6418</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/cb4c56e9a7ebc208730886e010b75475bf816fd9"><code>cb4c56e</code></a>
fix(docs): remove <a
href="https://github.com/mertcanaltin"><code>@​mertcanaltin</code></a>
from Triagers (<a
href="https://redirect.github.com/expressjs/express/issues/6408">#6408</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/7b44e1d8501d7b8a15de5bbee7d10a67d86f2630"><code>7b44e1d</code></a>
ci: use full SHAs for github action versions</li>
<li><a
href="https://github.com/expressjs/express/commit/eb6d12587a2fdb907bd91cbedcd3b92f434fadd0"><code>eb6d125</code></a>
deps: router@^2.2.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6417">#6417</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/f1a2dc884de77fe9e84cdc8807407bd57a2e1008"><code>f1a2dc8</code></a>
deps: type-is@^2.0.1 (<a
href="https://redirect.github.com/expressjs/express/issues/6420">#6420</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/6b51e8ef979d0aa6dc42ee0d61c8eb4c3e3196df"><code>6b51e8e</code></a>
deps: body-parser@^2.2.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6419">#6419</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/1f311c59d4b9cb94562ae0dd9917351e556f1602"><code>1f311c5</code></a>
build(deps-dev): bump cookie-session from 2.0.0 to 2.1.0 (<a
href="https://redirect.github.com/expressjs/express/issues/6399">#6399</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/9e97144222cb4c29df0a96b689781e87fc3e781c"><code>9e97144</code></a>
feat(deps): [email protected] (<a
href="https://redirect.github.com/expressjs/express/issues/6373">#6373</a>)</li>
<li><a
href="https://github.com/expressjs/express/commit/29d09803c11641d910107793947cefe4c0133358"><code>29d0980</code></a>
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (<a
href="https://redirect.github.com/expressjs/express/issues/6397">#6397</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/express/compare/4.21.0...v5.1.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `nodemon` from 3.1.7 to 3.1.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/remy/nodemon/releases">nodemon's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.10</h2>
<h2><a
href="https://github.com/remy/nodemon/compare/v3.1.9...v3.1.10">3.1.10</a>
(2025-04-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>update types and jsdocs (<a
href="https://redirect.github.com/remy/nodemon/issues/2232">#2232</a>)
(<a
href="https://github.com/remy/nodemon/commit/297c7c798b5e8be9b0a0b48c7c400953f3bc465e">297c7c7</a>),
closes <a
href="https://redirect.github.com/remy/nodemon/issues/2231">#2231</a></li>
</ul>
<h2>v3.1.9</h2>
<h2><a
href="https://github.com/remy/nodemon/compare/v3.1.8...v3.1.9">3.1.9</a>
(2024-12-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>maintain backward support for <code>exitcrash</code> (<a
href="https://github.com/remy/nodemon/commit/9c9de6eb075c62650145bfebfac3680923f172d6">9c9de6e</a>)</li>
</ul>
<h2>v3.1.8</h2>
<h2><a
href="https://github.com/remy/nodemon/compare/v3.1.7...v3.1.8">3.1.8</a>
(2024-12-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>types updated (<a
href="https://github.com/remy/nodemon/commit/cb91187ef6243d76d9fb641af7acd2a5fbd1e406">cb91187</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/remy/nodemon/commit/297c7c798b5e8be9b0a0b48c7c400953f3bc465e"><code>297c7c7</code></a>
fix: update types and jsdocs (<a
href="https://redirect.github.com/remy/nodemon/issues/2232">#2232</a>)</li>
<li><a
href="https://github.com/remy/nodemon/commit/f7661d942128299993342ae115da813cc2a732cd"><code>f7661d9</code></a>
chore: website</li>
<li><a
href="https://github.com/remy/nodemon/commit/8fc12e862ff7b2a84900abcc068c4085080074af"><code>8fc12e8</code></a>
Merge branch 'main' of github.com:remy/nodemon</li>
<li><a
href="https://github.com/remy/nodemon/commit/8b535a0f1c9608894e882fe1b3209c1c820441d7"><code>8b535a0</code></a>
chore: fix JQ rendering for site</li>
<li><a
href="https://github.com/remy/nodemon/commit/59d53500cf16b0705856f4c607049b9d0c1b45af"><code>59d5350</code></a>
chore: website</li>
<li><a
href="https://github.com/remy/nodemon/commit/9954aff2075380825bba2cf7054c0da37269a6e0"><code>9954aff</code></a>
chore: website</li>
<li><a
href="https://github.com/remy/nodemon/commit/d147fb652f812eabb6a64a16353e6b9f28a04463"><code>d147fb6</code></a>
chore: website</li>
<li><a
href="https://github.com/remy/nodemon/commit/53d2dfdf6377189068ad263af078587a0e282571"><code>53d2dfd</code></a>
chore: website</li>
<li><a
href="https://github.com/remy/nodemon/commit/60f147484d720fde5baf845ad66fb6d7da302f9c"><code>60f1474</code></a>
chore: website</li>
<li><a
href="https://github.com/remy/nodemon/commit/af51f773659a9bfb448d736c6fd78855ff922d2d"><code>af51f77</code></a>
Merge branch 'main' of github.com:remy/nodemon</li>
<li>Additional commits viewable in <a
href="https://github.com/remy/nodemon/compare/v3.1.7...v3.1.10">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]