Bump express-http-context from 1.2.5 to 2.0.1

[dependabot]

Bumps express-http-context from 1.2.5 to 2.0.1.

Changelog

Sourced from express-http-context's changelog.

2.0.1 (2025-04-19)

Fix:

• All instances of express-http-context now share the same global AsyncLocalStorage instance

2.0.0 (2025-04-02)

Migration notes:

• 🎉 The get, set, and middleware methods are unchanged. Applications consuming only these method can upgrade to v2 without any issue.

• ⚠️ Consumers of ns (namespace) will need to also migrate to AsyncLocalStorage (from cls-hooked). The ns instance is no longer exported. Instead, developers have access to asyncLocalStorage which exposes the internal instance of AsyncLocalStorage.

  • Before:

    import { ns } from "express-http-context";

  • After:

    import { asyncLocalStorage } from "express-http-context";

Features:

• Migrate internals to AsyncLocalStorage (from cls-hooked). AsyncLocalStorage is a production-ready, first-class feature of Node and provides predicable and stable access to the continuation context. See: https://nodejs.org/api/async_context.html#async_context_class_asynclocalstorage

Security:

• Removes all 3rd party production dependencies (all dependencies are now contained within NodeJS)
• Update dev dependencies to address known CVEs

Fix:

• Prevents context from being lost in popular middlewares such as body-parser and express-jwt.

Commits

• a84df9a 2.0.1
• 15d6c37 fix(#78): move instance from module to global scope
• 62d0460 test: add test to reproduce issue #78
• 1a4ad2c chore: add a local intermediate library for testing
• d8c1e4c 2.0.0
• 00bf97b test: fix typo in test data
• 2e0195a 2.0.0-rc.4
• 35d6e49 feat: export instance of AsyncLocalStorage
• 64a0a4c fix: allow middleware to be used multiple times
• c4e4dfd 2.0.0-rc.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)