fix: resolve dependabot alert

[Shubhangi-Microsoft]

This pull request updates several dependencies in the src/App/server project, primarily to address security, compatibility, and feature improvements. The main focus is on updating the http-proxy-middleware and related packages, as well as their transitive dependencies, to newer versions.

Dependency updates:

• Upgraded http-proxy-middleware from version 3.0.5 to 3.0.7 in both package.json and package-lock.json, which may include bug fixes and security patches. [1] [2] [3]
• Updated body-parser from 2.2.2 to 2.3.0, along with its dependencies such as content-type, http-errors, iconv-lite, qs, raw-body, and type-is. This also introduces a new direct dependency entry for content-type@2.0.0. [1] [2]
• Upgraded @types/node from 25.6.0 to 26.0.0 and its dependency undici-types from 7.19.0/7.19.2 to 8.3.0. [1] [2]
• Bumped several other transitive dependencies, including es-object-atoms, hasown, and side-channel, to their latest patch or minor versions. [1] [2] [3]
• Updated Node.js engine requirements for some dependencies to require Node.js 18 or higher, reflecting increased minimum supported versions. [1] [2]## Purpose

• ...

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• ...

Other Information

[Copilot]

Pull request overview

This pull request updates the src/App/server Node.js proxy/server project dependencies to address a Dependabot security alert and incorporate upstream patch/minor fixes in direct and transitive packages.

Changes:

• Bumped http-proxy-middleware from ^3.0.5 to ^3.0.7.
• Refreshed the lockfile, pulling in updated transitive dependencies (e.g., body-parser@2.3.0, type-is@2.1.0, @types/node@26.0.0, undici-types@8.3.0).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
src/App/server/package.json	Updates the direct dependency version for http-proxy-middleware.
src/App/server/package-lock.json	Updates resolved versions and integrity hashes for direct and transitive dependency upgrades.

Files not reviewed (1)

• src/App/server/package-lock.json: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.