chore(deps): bump express-validator from 6.15.0 to 7.3.2

[dependabot]

Bumps express-validator from 6.15.0 to 7.3.2.

Release notes

Sourced from express-validator's releases.

v7.3.2

What's Changed

• bump lodash to 4.17.23 to fix CVE-2025-13465 by @​mahmoodhamdi in express-validator/express-validator#1355

Plus several docs changes.

New Contributors

• @​mahmoodhamdi made their first contribution in express-validator/express-validator#1357

Full Changelog: express-validator/express-validator@v7.3.1...v7.3.2

v7.3.1

• Upgraded Validator to v13.15.23 (#1338, #1343)

v7.3.0

• Upgraded validator to v13.12.15 (see their release notes: https://github.com/validatorjs/validator.js/releases/tag/13.15.15)

v7.2.1

• Clone non-primitive replacement values when using #default()/#replace() to avoid object reference reuse (#1316)

v7.2.0

• Add hide() method (#1304, #1305)
• Add wildcard values to custom validator's metadata (#1297, #1308)
• Correctly select properties of primitives (#1245, #1279)

v7.1.0

• Upgraded validator to v13.12.0 (see their release notes: https://github.com/validatorjs/validator.js/releases/tag/13.12.0)
• Added missing fields to IsURLOptions (#1258, #1259)
• Added isULID() validator (#1248)
• Several improvements to docs

v7.0.1

• Fixed checkSchema() warning that known validators are unknown when its value is false - #1223

v7.0.0

🚀 🙌 First major version in almost 4 years! 🚀 🤯 Thanks everybody for having the patience. Hopefully this version brings many improvements to your developer experience!

Breaking changes 💥

• Minimum supported Node.js version is now 14+
• Removed deprecated APIs - #993
  • Import paths express-validator/check and express-validator/filter
  • Sanitization-only middlewares (e.g. sanitize(), sanitizeBody(), etc)
  • Deprecated TypeScript types (ValidationParamSchema and ValidationSchema)
• isObject() validator now assumes options.strict = true by default
• Validation errors changed shape
  • Field validation errors param property has been renamed to path
  • oneOf() validation errors no longer have a param: '_error' property
• (TypeScript only) The ValidationError type is now a discriminated union, it might be necessary to use switch or if statements to check that you're dealing with the type that you want to debug/format
• oneOf() signature changed: from oneOf(chains, message) to oneOf(chains, options: { message, errorType })

... (truncated)

Commits

• 7d06bc3 7.3.2
• 73fb78b ci: bump node version used across several action jobs
• 8a6c2d6 deps: upgrade docusaurus and friends
• 2db1d81 deps: further bump lodash to v4.18.1
• 0b1dbe3 docs: fix incorrect type references in oneOf and validation-result docs (#1358)
• 0386b00 docs: fix duplicate variable declaration in matchedData example (#1359)
• 97fde88 fix(deps): bump lodash to 4.17.23 to fix CVE-2025-13465 (#1355)
• 6c2df4d docs: fix incorrect checkSchema().run() example (#1357)
• 24da8b7 7.3.1
• 1a7fdb7 deps: upgrade validator to ~13.15.23
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)