Summary
Our core API framework dependencies, specifically Express and its associated middleware types, are falling significantly behind the upstream releases. Running outdated server frameworks exposes us to potential DoS vulnerabilities and deprives us of performance improvements in request routing.
This chore requires bumping Express to the latest stable version and carefully resolving the resulting TypeScript compiler errors. We have several custom middlewares that rely on extending the generic Request object, which typically breaks during major version upgrades. The entire routing tree must be validated against the new type definitions.
Acceptance Criteria
Tech Stack
TypeScript (Node.js 24), npm, Express.
Summary
Our core API framework dependencies, specifically Express and its associated middleware types, are falling significantly behind the upstream releases. Running outdated server frameworks exposes us to potential DoS vulnerabilities and deprives us of performance improvements in request routing.
This chore requires bumping Express to the latest stable version and carefully resolving the resulting TypeScript compiler errors. We have several custom middlewares that rely on extending the generic
Requestobject, which typically breaks during major version upgrades. The entire routing tree must be validated against the new type definitions.Acceptance Criteria
express,@types/express, and related middlewares to latest versions.src/middleware/.package-lock.jsonsecurely.Tech Stack
TypeScript (Node.js 24), npm, Express.