Dependabot `path-to-regexp` report due to `serve` usage

[MikeMcC399]

Issue

Dependabot reports a high severity vulnerability path-to-regexp outputs backtracking regular expressions in this repo concerning CVE-2024-45296.

This is also reported by npm audit:

path-to-regexp  0.2.0 - 7.2.0
Severity: high
path-to-regexp outputs backtracking regular expressions - https://github.com/advisories/GHSA-9wv6-86v2-598j
fix available via `npm audit fix --force`
Will install serve@6.5.8, which is a breaking change
node_modules/serve-handler/node_modules/path-to-regexp
  serve-handler  *
  Depends on vulnerable versions of path-to-regexp
  node_modules/serve-handler
    serve  >=7.0.0
    Depends on vulnerable versions of serve-handler
    node_modules/serve

The vulnerability is pulled in by

cypress-example-kitchensink/package.json

Line 64 in 31bf667

"serve": "14.2.3"

$ npm ls path-to-regexp
cypress-example-kitchensink@0.0.0-development
└─┬ serve@14.2.3
  └─┬ serve-handler@6.1.5
    └── path-to-regexp@2.2.1

• The issue has been reported to High severity vulnerabilities / serve-handler / path-to-regexp vercel/serve#811 , however at this time there is no resolution available.

[MikeMcC399]

• A fix is now available through serve@14.2.4.

• The update can be triggered through dependabot by somebody with write access to the repo's issue Dependency Dashboard #176

[MikeMcC399]

• PR fix(deps): update dependency serve to version 14.2.4 🌟 #897 should resolve this issue.