audit fix, and node 22 fix (#484)

* easy audit fixes

* more risky router update

* fix for api removed in node 22

* upgrade supertest to fix tests

* decode paths to handle unicode requests

* test on node 22

* run on node 22

* update package-lock

* add information to the changelog

* add information to the changelog

* add information to the changelog

.github/workflows/node-test.yml

@@ -22,6 +22,7 @@ jobs:
         node-version:
           - "18"
           - "20"
+          - "22"
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
@@ -42,7 +43,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "22"
           cache: npm
           cache-dependency-path: package-lock.json
 

changelog.txt

@@ -1 +1,4 @@
-* **BREAKING:** Requires Node.js >= 18.0.0.
+* Updates `engines.node` to include Node 22.
+* Updates dependencies to address `npm audit` issues.
+* Fixes issue where redirects of unicode paths may not have been handled correctly.
+* Fixes issue in Node 22 where `mtime` from `stat`-ing a file is no longer available.