From c4846700344f700a516fd13466cebf03fa2f0e80 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 11 Jul 2026 00:34:42 +0000
Subject: [PATCH] Bump morgan from 1.10.0 to 1.11.0

Bumps [morgan](https://github.com/expressjs/morgan) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/expressjs/morgan/releases)
- [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/morgan/compare/1.10.0...1.11.0)

---
updated-dependencies:
- dependency-name: morgan
  dependency-version: 1.11.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 31 ++++++++++++++++++++++++++-----
 package.json      |  2 +-
 2 files changed, 27 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 04ad0fa91c40..1f2cf1558862 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -154,7 +154,7 @@
         "mocha": "10.6.0",
         "mocha-junit-reporter": "2.2.1",
         "mocha-silent-reporter": "1.0.0",
-        "morgan": "1.10.0",
+        "morgan": "1.11.0",
         "multer": "1.4.5-lts.1",
         "open": "8.4.2",
         "plugin-error": "2.0.1",
@@ -19433,18 +19433,24 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/morgan": {
-      "version": "1.10.0",
+      "version": "1.11.0",
+      "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.11.0.tgz",
+      "integrity": "sha512-zSkVu3t18r39pw4ixfBKvfZi3y2UOqr7d4WYwcj3m8nXpEQK4rPO6GLzs/CExoRgmX3y9EjmmcXqv6jq0SK46g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "basic-auth": "~2.0.1",
         "debug": "2.6.9",
         "depd": "~2.0.0",
-        "on-finished": "~2.3.0",
-        "on-headers": "~1.0.2"
+        "on-finished": "~2.4.1",
+        "on-headers": "~1.1.0"
       },
       "engines": {
         "node": ">= 0.8.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/morgan/node_modules/debug": {
@@ -19468,6 +19474,19 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/morgan/node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
     "node_modules/mri": {
       "version": "1.1.6",
       "dev": true,
@@ -19962,7 +19981,9 @@
       }
     },
     "node_modules/on-headers": {
-      "version": "1.0.2",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz",
+      "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==",
       "dev": true,
       "license": "MIT",
       "engines": {
diff --git a/package.json b/package.json
index e08fb8451cb0..dadf4f40ead1 100644
--- a/package.json
+++ b/package.json
@@ -159,7 +159,7 @@
     "mocha": "10.6.0",
     "mocha-junit-reporter": "2.2.1",
     "mocha-silent-reporter": "1.0.0",
-    "morgan": "1.10.0",
+    "morgan": "1.11.0",
     "multer": "1.4.5-lts.1",
     "open": "8.4.2",
     "plugin-error": "2.0.1",