ci: build express with node.js v26

[shivarm]

No description provided.

[krzysdz]

I just tested Express locally with Node.js 26 and the tests won't even run, because of nodejs/node#62083 breaking the old version of yargs (nodejs/node#62083 (comment)), which is an indirect dependency of mocha. With latest mocha (11.7.5) tests pass.

[shivarm]

@krzysdz Should I upgrade mocha and yargs

[krzysdz]

I think it can be done as a part of this PR. Only updating mocha in package.json is necessary:

diff --git a/package.json b/package.json
index 8c9efb56..16012b61 100644
--- a/package.json
+++ b/package.json
@@ -72,7 +72,7 @@
     "hbs": "4.2.0",
     "marked": "^15.0.3",
     "method-override": "3.0.0",
-    "mocha": "^10.7.3",
+    "mocha": "^11.7.5",
     "morgan": "1.10.1",
     "nyc": "^17.1.0",
     "pbkdf2-password": "1.2.1",

[shivarm]

Thanks! Tests are passing

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	mocha@​10.8.2 ⏵ 11.7.5			+1

View full report

[shivarm]

Should we also remove node version 25 from matrix?

[krzysdz]

Should we also remove node version 25 from matrix?

No. Express supports node >= 18, so 18 and all later versions (even EOL) should be tested.