fix(deps): update dependencies minor and patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
express (source)	^5.1.0 → ^5.2.1
helmet (source)	^8.2.0 → ^8.3.0
jwks-rsa	^4.0.0 → ^4.1.0
react (source)	^19.2.7 → ^19.2.8
winston	^3.18.3 → ^3.19.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

helmetjs/helmet (helmet)

v8.3.0

Compare Source

Changed

• Content-Security-Policy: improved performance by ~7% when there are no dynamic directives
• Content-Security-Policy: improved error handling for invalid directive names

Fixed

• Content-Security-Policy: useDefaults: false with no directives is no longer valid, both at runtime and the type level
• Content-Security-Policy: dynamically-computed directive values would throw, not call next, when invalid
• Content-Security-Policy: dynamically-computed directive value entries would throw, not call next, when function threw

auth0/node-jwks-rsa (jwks-rsa)

v4.1.0

Compare Source

Full Changelog

Added

• feat: add cacheMaxAgeFallback and onStaleCacheFallback for graceful JWKS degradation during outages #​502 (cschetan77)

react/react (react)

v19.2.8

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud