[AH7]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncaught Exception SNYK-JS-QS-19432019	738
	Allocation of Resources Without Limits or Throttling SNYK-JS-QS-19432017	708

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncaught Exception
🦉 Allocation of Resources Without Limits or Throttling

[AH7]

This update includes multiple high-risk major version upgrades. Express v5, body-parser v2, and jsonld v5 introduce significant breaking changes that require code modifications and thorough testing. The upgrade for rdflib is also high-risk due to the large version jump and lack of a detailed changelog.

Top Breaking Changes

1. express 4.22.2 → 5.1.0 (HIGH RISK)

The upgrade to Express v5 is a major migration with numerous breaking changes. It modernizes the framework, improves performance, and enhances security.

Key Changes:

• Node.js Requirement: Requires Node.js 18 or later.
• Removed/Modified Methods: Many deprecated methods from v4 are now removed. Code must be updated to use the new signatures.
  • app.del() is replaced by app.delete().
  • res.send(status, body) must be changed to res.status(status).send(body).
  • req.param() is removed; use req.params, req.body, or req.query instead.
• Asynchronous Error Handling: Asynchronous functions in the middleware chain will now automatically forward errors to the error handler without needing a try...catch block.
• Route Path Matching: The syntax for route matching has changed, with stricter rules for regular expressions and parameter modifiers.

Recommendation: Use the official codemods to automate many of the required changes (npx @expressjs/codemod upgrade). A full test suite run is essential after upgrading.

2. body-parser 1.20.6 → 2.1.0 (HIGH RISK)

This major version upgrade introduces several breaking changes that will likely require code adjustments.

Key Changes:

• Node.js Requirement: The minimum supported Node.js version is now 18.
• req.body Behavior: req.body will be undefined if no body is parsed, instead of being initialized to an empty object ({}). This requires adding checks for req.body before access.
• Middleware Removal: The main bodyParser() combination middleware has been removed. You must use the specific parsers directly (e.g., bodyParser.json(), bodyParser.urlencoded()).
• urlencoded Parser: The extended option now correctly defaults to false.

3. jsonld 0.4.12 → 5.0.0 (HIGH RISK)

This is a very large version jump with breaking changes across

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.