Upgrade expressjs (#1633)

* upgrade expressjs

* migration

* reenable test

* extend timeout on download test

* fixup! migration

* move empty body test from controller to validator

* enusre not empty

* extract validation function

* fixup! reenable test

* remove thin controllers

* disable e2e test of project file download

apps/server/package.json

@@ -6,18 +6,18 @@
   "exports": "./src/index.js",
   "dependencies": {
     "@googleapis/sheets": "^5.0.5",
-    "cookie": "^1.0.2",
-    "cookie-parser": "^1.4.7",
-    "cors": "^2.8.5",
+    "cookie": "1.0.2",
+    "cookie-parser": "1.4.7",
+    "cors": "2.8.5",
     "dotenv": "^16.0.1",
-    "express": "^4.21.1",
-    "express-static-gzip": "^2.2.0",
-    "express-validator": "^7.2.0",
+    "express": "5.1.0",
+    "express-static-gzip": "3.0.0",
+    "express-validator": "7.2.1",
+    "multer": "2.0.1",
     "fast-equals": "^5.0.1",
     "google-auth-library": "^9.4.2",
     "got": "^14.4.5",
     "lowdb": "^7.0.1",
-    "multer": "^1.4.5-lts.1",
     "ontime-utils": "workspace:*",
     "osc-min": "2.1.2",
     "sanitize-filename": "^1.6.3",
@@ -26,10 +26,10 @@
     "xlsx": "^0.18.5"
   },
   "devDependencies": {
-    "@types/cookie-parser": "^1.4.8",
-    "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.17",
-    "@types/multer": "^1.4.11",
+    "@types/cookie-parser": "1.4.9",
+    "@types/cors": "2.8.19",
+    "@types/express": "5.0.3",
+    "@types/multer": "1.4.13",
     "@types/node": "catalog:",
     "@types/websocket": "^1.0.5",
     "@types/ws": "^8.5.10",