devdeps(express-access-log-middleware): update express-access-log-middleware dev dependencies

[mapcolonies-devops]

This PR contains the following updates:

Package	Change	Age	Confidence
express (source)	4.22.1 → 4.22.2
pino (source)	10.1.0 → 10.3.1

---

Release Notes

expressjs/express (express)

v4.22.2

Compare Source

What's Changed

• fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
  • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
• deps: qs@~6.15.1
• deps: body-parser@~1.20.5

New Contributors

• @​suuuuuuminnnnnn made their first contribution in #​7021
• @​SAY-5 made their first contribution in #​7181

Full Changelog: expressjs/express@v4.22.1...v4.22.2

pinojs/pino (pino)

v10.3.1

Compare Source

What's Changed

• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​2385
• build(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.23.2 by @​dependabot[bot] in #​2386
• docs: clarify transport level filtering behavior by @​mcollina in #​2390
• fix(transport): sanitize invalid NODE_OPTIONS preloads for workers by @​mcollina in #​2391

Full Changelog: pinojs/pino@v10.3.0...v10.3.1

v10.3.0

Compare Source

What's Changed

• feat: improve the return type of multistream().clone() by @​mrazauskas in #​2377
• feat: set worker thread name for transport identification by @​mcollina in #​2380

Full Changelog: pinojs/pino@v10.2.1...v10.3.0

v10.2.1

Compare Source

What's Changed

• fix: prevent ERR_WORKER_INVALID_EXEC_ARGV with monitoring tools by @​mcollina in #​2379

Full Changelog: pinojs/pino@v10.2.0...v10.2.1

v10.2.0

Compare Source

What's Changed

• chore: lint TypeScript files by @​mrazauskas in #​2363
• fix: prevent memory leak when using transport with --import preload by @​mcollina in #​2374

New Contributors

• @​mrazauskas made their first contribution in #​2363

Full Changelog: pinojs/pino@v10.1.1...v10.2.0

v10.1.1

Compare Source

What's Changed

• fix(types): Correct conditional type handling for generic log function arguments by @​samchungy in #​2329
• perf: use JSON.stringify in fast path for node v25+ by @​ronag in #​2330
• build(deps): bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​2336
• build(deps-dev): bump borp from 0.20.2 to 0.21.0 by @​dependabot[bot] in #​2337
• build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 by @​dependabot[bot] in #​2338
• docs: update CONTRIBUTING.md to reference 'main' instead of 'master' by @​NoobFullStack in #​2334
• feat(browser): add reportCaller to surface user callsite by @​dev-KingMaster in #​2340
• docs: update transports.md by @​marklai1998 in #​2224
• docs: add Node.js 22+ native TypeScript type stripping support by @​mcollina in #​2347
• feat(types): use ThreadStream type from thread-stream by @​CHC383 in #​2320
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​2354
• build(deps): update thread-stream to v4 by @​mcollina in #​2356
• fix: harden transport loading against prototype pollution by @​omdxp in #​2358
• docs: add threat model to SECURITY.md by @​mcollina in #​2360
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​2365
• build(deps-dev): bump @​types/node from 24.10.4 to 25.0.3 by @​dependabot[bot] in #​2367
• fix: allow passing string, number, null for %o placeholder by @​rChaoz in #​2372

New Contributors

• @​NoobFullStack made their first contribution in #​2334
• @​dev-KingMaster made their first contribution in #​2340
• @​marklai1998 made their first contribution in #​2224
• @​CHC383 made their first contribution in #​2320
• @​omdxp made their first contribution in #​2358
• @​rChaoz made their first contribution in #​2372

Full Changelog: pinojs/pino@v10.1.0...v10.1.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.