Update dependency body-parser to v2

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
body-parser	dependencies	major	^1.19.0 → ^2.0.0

By merging this PR, the issue #36 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability
Medium	5.3	CVE-2026-82417
Medium	5.3	CVE-2026-8723
Low	3.7	CVE-2026-12590
Low	3.7	CVE-2026-82562

---

Release Notes

expressjs/body-parser (body-parser)

v2.0.0

Compare Source

=========================

Breaking Changes

• Node.js 18 is the minimum supported version
• req.body is no longer always initialized to {}
  • it is left undefined unless a body is parsed
• Remove deprecated bodyParser() combination middleware
• urlencoded parser now defaults extended to false as released, this is not the case, fixed in 2.0.1
• urlencoded simple parser now uses qs module instead of querystring module

Features

• Add brotli support #​406
• urlencoded: Add option to customize the depth with a default value of 32
• urlencoded: Support iso-8859-1, utf8 sentinel, and numeric entities
• Use on-finished to determine when body read

Dependencies

• deps: raw-body@^3.0.0
• deps: qs@​6.12.3
• deps: debug@​3.1.0
• deps: iconv-lite@​0.5.2

v1.20.6

Compare Source

===================

• Security fix for GHSA-v422-hmwv-36x6
• fix: improve limit option validation (#​698)
  • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
  • null and undefined fall back to the default 100kb limit

v1.20.5

Compare Source

===================

• refactor(json): simplify strict mode error string construction
• fix: extended urlencoded parsing of arrays with >100 elements (#​716)
• deps: qs@~6.15.1

---

• If you want to rebase/retry this PR, check this box