fix(deps): update dependency morgan to ~1.10.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
morgan	~1.6.1 → ~1.10.0

---

Release Notes

expressjs/morgan (morgan)

v1.10.1

Compare Source

===================

• deps: on-headers@~1.1.0
  • Fix CVE-2025-7339 (GHSA-76c9-3jph-rj3q)

v1.10.0

Compare Source

===================

• Add :total-time token
• Fix trailing space in colored status code for dev format
• deps: basic-auth@~2.0.1
  • deps: safe-buffer@​5.1.2
• deps: depd@~2.0.0
  • Replace internal eval usage with Function constructor
  • Use instance methods on process to check for listeners
• deps: on-headers@~1.0.2
  • Fix res.writeHead patch missing return value

v1.9.1

Compare Source

==================

• Fix using special characters in format
• deps: depd@~1.1.2
  • perf: remove argument reassignment

v1.9.0

Compare Source

==================

• Use res.headersSent when available
• deps: basic-auth@~2.0.0
  • Use safe-buffer for improved Buffer API
• deps: debug@​2.6.9
• deps: depd@~1.1.1
  • Remove unnecessary Buffer loading

v1.8.2

Compare Source

==================

• deps: debug@​2.6.8
  • Fix DEBUG_MAX_ARRAY_LENGTH
  • deps: ms@​2.0.0

v1.8.1

Compare Source

==================

• deps: debug@​2.6.1
  • Fix deprecation messages in WebStorm and other editors
  • Undeprecate DEBUG_FD set to 1 or 2

v1.8.0

Compare Source

==================

• Fix sending unnecessary undefined argument to token functions
• deps: basic-auth@~1.1.0
• deps: debug@​2.6.0
  • Allow colors in workers
  • Deprecated DEBUG_FD environment variable
  • Fix error when running under React Native
  • Use same color for same namespace
  • deps: ms@​0.7.2
• perf: enable strict mode in compiled functions

v1.7.0

Compare Source

==================

• Add digits argument to response-time token
• deps: depd@~1.1.0
  • Enable strict mode in more places
  • Support web browser loading
• deps: on-headers@~1.0.1
  • perf: enable strict mode

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.