[Snyk] Fix for 1 vulnerabilities

[bryan-han-snyk]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Inefficient Algorithmic Complexity SNYK-JS-MINIMATCH-15353389	710

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[bryan-han-snyk]

This release includes multiple major version upgrades with significant breaking changes. The upgrade for tap is a massive jump from v5 to v18, requiring a full migration. The express-fileupload upgrade also introduces notable breaking changes.

Highlights & Recommendations

• tap@5.8.0 → tap@18.0.0 (HIGH RISK)
  This is a complete overhaul of the testing framework with numerous breaking changes across multiple major versions. A simple upgrade is not possible; a full migration of test files and configuration is required.

  • Complete Rewrite: The library was rewritten in TypeScript, with native support for ESM and modern Node.js features.
  • Configuration Overhaul: Configuration files are significantly different. For example, test-regexp is replaced by include/exclude globs.
  • Coverage Engine Change: nyc has been replaced by c8. Coverage is now enabled by default, and missing coverage is treated as a test failure.
  • API Changes: Assertion synonyms have been removed, and lifecycle hooks like beforeEach no longer accept callbacks and must be synchronous or return a promise.
  • Recommendation: Treat this as a major project to migrate your test suite. Review the official changelog and upgrading guide carefully.

• express-fileupload@0.0.5 → express-fileupload@1.1.10 (HIGH RISK)
  This upgrade crosses the 1.0.0 boundary and introduces critical breaking changes.

  • Multipart Only: As of v0.1.0, support for application/x-www-form-urlencoded has been completely removed. The library now only handles multipart/form-data requests.
  • API Change (.md5): The md5 property on the file object was changed from a string to a function in v1.0.0, and then reverted to a string checksum in v1.1.1. Your code may break depending on which version's behavior it relied upon.
  • Node.js Support: Support for Node.js versions older than v4 is dropped.
  • Recommendation: Verify that your application does not rely on this middleware for urlencoded form parsing. Check any usage of the .md5 file property.

• snyk@1.290.2 → snyk@1.996.0 (LOW RISK)
  While this is a large version jump, it occurs within a single major version (v1). According to Snyk's official policy, breaking changes are reserved for major version updates. This upgrade consists of accumulated features, bug fixes, and performance improvements, and brings the CLI back into the 12-month supported version window.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[bryan-han-snyk]

⛔ Snyk checks have failed. 4 issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (4)
⛔	Open Source Security	0	1	3	0	4 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-io]

⛔ Snyk checks have failed. 4 issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (4)
⛔	Open Source Security	0	1	3	0	4 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.