build(deps): bump on-headers and express-session (#1519)

Author: dependabot[bot]

package-lock.json

@@ -95,7 +95,7 @@
     "@koa/router": "^13.1.1",
     "body-parser": "^1.20.2",
     "express": "^4.21.2",
-    "express-session": "^1.18.0",
+    "express-session": "^1.18.2",
     "koa": "^2.16.1",
     "koa-bodyparser": "^4.4.1",
     "multer": "^2.0.0"