chore(deps): Bump express in test utils + e2e apps (#19159)

chargome · web-flow · commit ca24c711ebd7 · 2026-02-04T18:01:32.000+01:00
Shuold get rid of warnings for vulnerable `path-to-regexp` version https://github.com/getsentry/sentry-javascript/security/dependabot/452 Closes #19160 (added automatically)
diff --git a/dev-packages/e2e-tests/test-applications/create-remix-app-express-vite-dev/package.json b/dev-packages/e2e-tests/test-applications/create-remix-app-express-vite-dev/package.json
@@ -18,7 +18,7 @@
     "@remix-run/react": "^2.17.4",
     "@sentry/remix": "latest || *",
     "compression": "^1.7.4",
-    "express": "^4.18.2",
+    "express": "^4.21.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",
     "react": "^18.2.0",
diff --git a/dev-packages/e2e-tests/test-applications/create-remix-app-express/package.json b/dev-packages/e2e-tests/test-applications/create-remix-app-express/package.json
@@ -20,7 +20,7 @@
     "@sentry/remix": "latest || *",
     "compression": "^1.7.4",
     "cross-env": "^7.0.3",
-    "express": "^4.18.2",
+    "express": "^4.21.2",
     "isbot": "^4.1.0",
     "morgan": "^1.10.0",
     "react": "^18.2.0",
diff --git a/dev-packages/e2e-tests/test-applications/node-core-express-otel-v1-custom-sampler/package.json b/dev-packages/e2e-tests/test-applications/node-core-express-otel-v1-custom-sampler/package.json
@@ -23,7 +23,7 @@
     "@sentry/opentelemetry": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-core-express-otel-v1-sdk-node/package.json b/dev-packages/e2e-tests/test-applications/node-core-express-otel-v1-sdk-node/package.json
@@ -25,7 +25,7 @@
     "@sentry/opentelemetry": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-core-express-otel-v2-custom-sampler/package.json b/dev-packages/e2e-tests/test-applications/node-core-express-otel-v2-custom-sampler/package.json
@@ -23,7 +23,7 @@
     "@sentry/opentelemetry": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-core-express-otel-v2-sdk-node/package.json b/dev-packages/e2e-tests/test-applications/node-core-express-otel-v2-sdk-node/package.json
@@ -25,7 +25,7 @@
     "@sentry/opentelemetry": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-express-cjs-preload/package.json b/dev-packages/e2e-tests/test-applications/node-express-cjs-preload/package.json
@@ -11,7 +11,7 @@
   "dependencies": {
     "@sentry/node": "latest || *",
     "@sentry/opentelemetry": "latest || *",
-    "express": "4.20.0"
+    "express": "^4.21.2"
   },
   "devDependencies": {
     "@playwright/test": "~1.56.0",
diff --git a/dev-packages/e2e-tests/test-applications/node-express-esm-loader/package.json b/dev-packages/e2e-tests/test-applications/node-express-esm-loader/package.json
@@ -11,7 +11,7 @@
   "dependencies": {
     "@sentry/node": "latest || *",
     "@sentry/opentelemetry": "latest || *",
-    "express": "4.20.0"
+    "express": "^4.21.2"
   },
   "devDependencies": {
     "@playwright/test": "~1.56.0",
diff --git a/dev-packages/e2e-tests/test-applications/node-express-esm-preload/package.json b/dev-packages/e2e-tests/test-applications/node-express-esm-preload/package.json
@@ -11,7 +11,7 @@
   "dependencies": {
     "@sentry/node": "latest || *",
     "@sentry/opentelemetry": "latest || *",
-    "express": "4.20.0"
+    "express": "^4.21.2"
   },
   "devDependencies": {
     "@playwright/test": "~1.56.0",
diff --git a/dev-packages/e2e-tests/test-applications/node-express-esm-without-loader/package.json b/dev-packages/e2e-tests/test-applications/node-express-esm-without-loader/package.json
@@ -11,7 +11,7 @@
   "dependencies": {
     "@sentry/node": "latest || *",
     "@sentry/opentelemetry": "latest || *",
-    "express": "4.20.0"
+    "express": "^4.21.2"
   },
   "devDependencies": {
     "@playwright/test": "~1.56.0",
diff --git a/dev-packages/e2e-tests/test-applications/node-express-incorrect-instrumentation/package.json b/dev-packages/e2e-tests/test-applications/node-express-incorrect-instrumentation/package.json
@@ -16,7 +16,7 @@
     "@trpc/client": "10.45.4",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.20.0",
+    "express": "^4.21.2",
     "typescript": "~5.0.0",
     "zod": "~3.22.4"
   },
diff --git a/dev-packages/e2e-tests/test-applications/node-express-send-to-sentry/package.json b/dev-packages/e2e-tests/test-applications/node-express-send-to-sentry/package.json
@@ -14,7 +14,7 @@
     "@sentry/node": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/package.json b/dev-packages/e2e-tests/test-applications/node-firebase/firestore-app/package.json
@@ -9,7 +9,7 @@
   "dependencies": {
     "@firebase/app": "^0.13.1",
     "@sentry/node": "latest || *",
-    "express": "^4.18.2",
+    "express": "^4.21.2",
     "firebase": "^12.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-otel-custom-sampler/package.json b/dev-packages/e2e-tests/test-applications/node-otel-custom-sampler/package.json
@@ -17,7 +17,7 @@
     "@sentry/opentelemetry": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-otel-sdk-node/package.json b/dev-packages/e2e-tests/test-applications/node-otel-sdk-node/package.json
@@ -16,7 +16,7 @@
     "@sentry/node": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-otel-without-tracing/package.json b/dev-packages/e2e-tests/test-applications/node-otel-without-tracing/package.json
@@ -20,7 +20,7 @@
     "@sentry/node": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/node-otel/package.json b/dev-packages/e2e-tests/test-applications/node-otel/package.json
@@ -16,7 +16,7 @@
     "@sentry/node": "latest || *",
     "@types/express": "4.17.17",
     "@types/node": "^18.19.1",
-    "express": "4.20.0",
+    "express": "^4.21.2",
     "typescript": "~5.0.0"
   },
   "devDependencies": {
diff --git a/dev-packages/e2e-tests/test-applications/react-router-6-descendant-routes/package.json b/dev-packages/e2e-tests/test-applications/react-router-6-descendant-routes/package.json
@@ -6,7 +6,7 @@
     "@sentry/react": "latest || *",
     "@types/react": "18.0.0",
     "@types/react-dom": "18.0.0",
-    "express": "4.20.0",
+    "express": "^4.21.2",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-router-dom": "^6.28.0",
diff --git a/dev-packages/e2e-tests/test-applications/react-router-6/package.json b/dev-packages/e2e-tests/test-applications/react-router-6/package.json
@@ -6,7 +6,7 @@
     "@sentry/react": "latest || *",
     "@types/react": "18.0.0",
     "@types/react-dom": "18.0.0",
-    "express": "4.19.2",
+    "express": "^4.21.2",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-router-dom": "^6.4.1",
diff --git a/dev-packages/e2e-tests/test-applications/react-router-7-cross-usage/package.json b/dev-packages/e2e-tests/test-applications/react-router-7-cross-usage/package.json
@@ -6,7 +6,7 @@
     "@sentry/react": "latest || *",
     "@types/react": "18.0.0",
     "@types/react-dom": "18.0.0",
-    "express": "4.20.0",
+    "express": "^4.21.2",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-router-dom": "7.6.0",
diff --git a/dev-packages/e2e-tests/test-applications/react-router-7-lazy-routes/package.json b/dev-packages/e2e-tests/test-applications/react-router-7-lazy-routes/package.json
@@ -6,7 +6,7 @@
     "@sentry/react": "latest || *",
     "@types/react": "18.0.0",
     "@types/react-dom": "18.0.0",
-    "express": "4.20.0",
+    "express": "^4.21.2",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-router-dom": "7.6.0",
diff --git a/dev-packages/node-core-integration-tests/package.json b/dev-packages/node-core-integration-tests/package.json
@@ -39,7 +39,7 @@
     "body-parser": "^1.20.3",
     "cors": "^2.8.5",
     "cron": "^3.1.6",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "http-terminator": "^3.2.0",
     "nock": "^13.5.5",
     "node-cron": "^3.0.3",
diff --git a/dev-packages/node-integration-tests/package.json b/dev-packages/node-integration-tests/package.json
@@ -52,7 +52,7 @@
     "cors": "^2.8.5",
     "cron": "^3.1.6",
     "dataloader": "2.2.2",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "generic-pool": "^3.9.0",
     "graphql": "^16.3.0",
     "hono": "^4.11.7",
diff --git a/dev-packages/node-integration-tests/suites/modules/test.ts b/dev-packages/node-integration-tests/suites/modules/test.ts
@@ -1,6 +1,6 @@
 import { SDK_VERSION } from '@sentry/core';
 import { join } from 'path';
-import { afterAll, describe, test } from 'vitest';
+import { afterAll, describe, expect, test } from 'vitest';
 import { cleanupChildProcesses, createRunner } from '../../utils/runner';
 
 describe('modulesIntegration', () => {
@@ -15,7 +15,7 @@ describe('modulesIntegration', () => {
         event: {
           modules: {
             // exact version comes from require.caches
-            express: '4.21.1',
+            express: expect.stringMatching(/^4\.\d+\.\d+$/),
             // this comes from package.json
             '@sentry/node': SDK_VERSION,
             yargs: '^16.2.0',
@@ -35,7 +35,7 @@ describe('modulesIntegration', () => {
         event: {
           modules: {
             // this comes from package.json
-            express: '^4.21.1',
+            express: expect.stringMatching(/^\^4\.\d+\.\d+$/),
             '@sentry/node': SDK_VERSION,
             yargs: '^16.2.0',
           },
diff --git a/dev-packages/node-overhead-gh-action/package.json b/dev-packages/node-overhead-gh-action/package.json
@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "@sentry/node": "10.38.0",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "mysql2": "^3.14.4"
   },
   "devDependencies": {
diff --git a/dev-packages/test-utils/package.json b/dev-packages/test-utils/package.json
@@ -44,7 +44,7 @@
     "@playwright/test": "~1.56.0"
   },
   "dependencies": {
-    "express": "^4.21.1"
+    "express": "^4.21.2"
   },
   "devDependencies": {
     "@playwright/test": "~1.56.0",
diff --git a/package.json b/package.json
@@ -151,7 +151,8 @@
     "gauge/strip-ansi": "6.0.1",
     "wide-align/string-width": "4.2.3",
     "cliui/wrap-ansi": "7.0.0",
-    "sucrase": "getsentry/sucrase#es2020-polyfills"
+    "sucrase": "getsentry/sucrase#es2020-polyfills",
+    "**/express/path-to-regexp": "0.1.12"
   },
   "version": "0.0.0",
   "name": "sentry-javascript",
diff --git a/yarn.lock b/yarn.lock
