Pin express version to make sure integration tests pass (#5510)

* Pin express version to make sure integration tests pass

The issue itself has to be addressed and this should be reworked
after this landing.

* Fix appsec ci

* Apply suggestions from code review

---------

Co-authored-by: Ugaitz Urien <ugaitz.urien@datadoghq.com>
Co-authored-by: Thomas Watson <w@tson.dk>

Author: 3 people

integration-tests/appsec/iast.esm-security-controls.spec.js

@@ -11,7 +11,7 @@ describe('ESM Security controls', () => {
 
   before(async function () {
     this.timeout(process.platform === 'win32' ? 90000 : 30000)
-    sandbox = await createSandbox(['express'])
+    sandbox = await createSandbox(['express@4']) // TODO: Remove pinning once our tests support Express v5
     appPort = await getPort()
     cwd = sandbox.folder
     appFile = path.join(cwd, 'appsec', 'esm-security-controls', 'index.mjs')

integration-tests/opentelemetry.spec.js

@@ -61,7 +61,7 @@ describe('opentelemetry', () => {
       '@opentelemetry/instrumentation',
       '@opentelemetry/instrumentation-http',
       '@opentelemetry/instrumentation-express@0.47.1',
-      'express'
+      'express@4' // TODO: Remove pinning once our tests support Express v5
     ]
     if (satisfies(process.version.slice(1), '>=14')) {
       dependencies.push('@opentelemetry/sdk-node')