TPEN Services npm Package Updates

[thehabes]

Summary

Updates npm packages and Node.js version requirements across the application.

Package Updates

Major Version Updates

Package	From	To	Notes
mongodb	^6.20.0	^7.0.0	MongoDB driver major upgrade - callback API removed
marked	^16.3.0	^17.0.1	Markdown parser major upgrade

Minor/Patch Updates

Package	From	To
express	^5.1.0	^5.2.1
@iiif/helpers	^1.5.3	^1.5.7
dompurify	^3.2.7	^3.3.1
mime-types	^3.0.1	^3.0.2
nodemailer	^7.0.6	^7.0.11
nodemon (dev)	^3.1.10	^3.1.11

Note we are not able to update "express-oauth2-jwt-bearer": "~1.6.1" yet.

Worth keeping an eye on

• v1.7.2 Release Failure auth0/node-oauth2-jwt-bearer#210
• v1.7.1+ Response Code Change auth0/node-oauth2-jwt-bearer#211

Runtime Requirements

• Node.js: >=22.20.0 → >=24.12.0
• npm: Added >=11.7.0

CI/CD Changes

• Updated Node.js version in all GitHub Actions workflows from 22 to 24

Related PRs

This PR is part of a coordinated package update across the TPEN 3.0 stack:

• TinyPen: TinyPEN npm Package Updates TinyPen#25
• TinyNode: TinyNode npm Package Updates TinyNode#108
• RERUM V1: RERUM v1 npm Package Updates rerum_server_nodejs#238

[Copilot]

Pull request overview

This PR updates npm package dependencies and Node.js runtime requirements to their latest versions. The changes include major version upgrades for MongoDB (6.20.0 → 7.0.0) and marked (16.3.0 → 17.0.1), along with minor/patch updates for several other packages. The Node.js requirement is upgraded from >=22.20.0 to >=24.12.0, and a new npm version requirement (>=11.7.0) is added. All GitHub Actions workflows are updated to use Node.js 24, and a test is updated to use proper MongoDB ObjectId format instead of a numeric value.

Key Changes:

• Major version updates for mongodb and marked packages with breaking changes in callback APIs
• Node.js runtime requirement increased to version 24.12.0 with new npm requirement
• GitHub Actions workflows updated consistently across all deployment/test workflows
• Test updated to use valid MongoDB ObjectId hex string format

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
package.json	Updates package versions for mongodb (^7.0.0), marked (^17.0.1), express (^5.2.1), and other dependencies; updates Node.js engine to >=24.12.0 and adds npm requirement >=11.7.0
package-lock.json	Reflects lockfile updates for all dependency version changes with transitive dependency updates
userProfile/tests/functionality_unit.test.js	Changes validateID test from numeric value (123) to proper 24-character hex string MongoDB ObjectId format
.github/workflows/test_pushes.yaml	Updates Node.js version from ^22.20.0 to 24 for test workflow
.github/workflows/ci_prod.yaml	Updates Node.js version from ^22.20.0 to 24 for production CI workflow
.github/workflows/ci_dev.yaml	Updates Node.js version from ^22.20.0 to 24 for development CI workflow
.github/workflows/cd_prod.yaml	Updates Node.js version from ^22.20.0 to 24 for production deployment workflow
.github/workflows/cd_dev.yaml	Updates Node.js version from ^22.20.0 to 24 for development deployment workflow

[cubap]

we still need some package cleanup, but this is a good change