[@rushstack/rush-serve-plugin] Bump express to 4.21.1 (fix vulnerabilities) (#5365)

* rush-serve-plugin: bump express to 4.21.1 to address vulnerabilities\n\n- Update dependency in rush-serve-plugin/package.json\n- Add Rush change file (patch) for @rushstack/rush-serve-plugin\n\nFixes #5327

* Update changefile.

* Update changefile.

* Bump version in lockfile explorer.

---------

Co-authored-by: Ian Clanton-Thuon <iclanton@users.noreply.github.com>

Author: cnaples79

apps/lockfile-explorer/package.json

@@ -68,7 +68,7 @@
     "@rushstack/terminal": "workspace:*",
     "@rushstack/ts-command-line": "workspace:*",
     "cors": "~2.8.5",
-    "express": "4.20.0",
+    "express": "4.21.1",
     "js-yaml": "~4.1.0",
     "open": "~8.4.0",
     "semver": "~7.5.4",

common/changes/@rushstack/lockfile-explorer/fix-rush-serve-express-bump_2025-09-28-12-18.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/lockfile-explorer",
+      "comment": "Bump \"express\" to 4.21.1 to address reported vulnerabilities in 4.20.0.",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@rushstack/lockfile-explorer"
+}

common/changes/@rushstack/rush-serve-plugin/express-4-21-bump.json

@@ -0,0 +1,11 @@
+{
+  "changes": [
+    {
+      "comment": "Bump \"express\" to 4.21.1 to address reported vulnerabilities in 4.20.0.",
+      "type": "none",
+      "packageName": "@microsoft/rush"
+    }
+  ],
+  "packageName": "@rushstack/rush-serve-plugin",
+  "email": "cnaples79@users.noreply.github.com"
+}

common/config/subspaces/default/pnpm-lock.yaml

@@ -1,5 +1,5 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "99186b016ffe5874093a1b9fb71c52c903b86978",
+  "pnpmShrinkwrapHash": "07641f4e10427e5749da9c164023aa3bc7b4b8ec",
   "preferredVersionsHash": "61cd419c533464b580f653eb5f5a7e27fe7055ca"
 }

common/config/subspaces/default/repo-state.json

@@ -24,7 +24,7 @@
     "@rushstack/ts-command-line": "workspace:*",
     "compression": "~1.7.4",
     "cors": "~2.8.5",
-    "express": "4.20.0",
+    "express": "4.21.1",
     "http2-express-bridge": "~1.0.7",
     "ws": "~8.14.1"
   },