From 5ec36b4d9ae4b82062df0ab9023f670512612e2d Mon Sep 17 00:00:00 2001
From: Said Sef <saidsef@gmail.com>
Date: Fri, 3 Jul 2026 11:27:50 +0100
Subject: [PATCH] chore(deps): remove unused cors dependency

The cors package was declared in app/package.json but is never imported
or used anywhere in the codebase (a repo-wide search returns only the
manifest line). Removing it drops cors and its transitive dependencies
from the production install and the Docker image.

Bump patch version 1.5.1 -> 1.5.2.
---
 app/package.json | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/app/package.json b/app/package.json
index 7f4856a..ceffc0d 100644
--- a/app/package.json
+++ b/app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "node-webserver",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "test application - web server",
   "main": "index.js",
   "scripts": {
@@ -28,7 +28,6 @@
   "license": "MIT",
   "dependencies": {
     "compression": "^1.7.4",
-    "cors": "^2.8.5",
     "express": "^5.0.0",
     "helmet": "^8.0.0",
     "pino-http": "^11.0.0"