From 22a2c24c8d1810eb4b7dbfb0c980b79be49494a9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 30 Sep 2026 01:30:47 +0000
Subject: [PATCH] Bump the npm_and_yarn group across 1 directory with 2 updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [morgan](https://github.com/expressjs/morgan) and [qs](https://github.com/ljharb/qs).


Updates `morgan` from 1.11.0 to 1.12.1
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/morgan/compare/1.11.0...1.12.1)

Updates `qs` from 6.15.3 to 6.16.0
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.3...v6.16.0)

---
updated-dependencies:
- dependency-name: morgan
  dependency-version: 1.12.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: qs
  dependency-version: 6.16.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 14 +++++++-------
 package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 151d66e6..ee891527 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "express-oauth2-jwt-bearer": "^1.10.0",
         "express-urlrewrite": "~2.0.3",
         "mongodb": "^7.5.0",
-        "morgan": "~1.11.0"
+        "morgan": "~1.12.1"
       },
       "devDependencies": {
         "c8": "^12.0.0",
@@ -1341,9 +1341,9 @@
       }
     },
     "node_modules/morgan": {
-      "version": "1.11.0",
-      "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.11.0.tgz",
-      "integrity": "sha512-zSkVu3t18r39pw4ixfBKvfZi3y2UOqr7d4WYwcj3m8nXpEQK4rPO6GLzs/CExoRgmX3y9EjmmcXqv6jq0SK46g==",
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.12.1.tgz",
+      "integrity": "sha512-tljKC0ex20AjO58Ob/eZ53JloycbVswbVNCHx6V6VLGzqt/w8dIynVGL0G8qVjNKwiA7sYSogCrN6QtJ82IV+g==",
       "license": "MIT",
       "dependencies": {
         "basic-auth": "~2.0.1",
@@ -1532,9 +1532,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.15.3",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
-      "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
+      "version": "6.16.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
+      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "es-define-property": "^1.0.1",
diff --git a/package.json b/package.json
index 6c0a6f53..93f5a1de 100644
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
     "express-oauth2-jwt-bearer": "^1.10.0",
     "express-urlrewrite": "~2.0.3",
     "mongodb": "^7.5.0",
-    "morgan": "~1.11.0"
+    "morgan": "~1.12.1"
   },
   "devDependencies": {
     "c8": "^12.0.0",