Enhance CORS configuration in app.js to support path-based options and set max age for preflight requests. Update dependencies in package.json and pnpm-lock.yaml to latest versions, including express, body-parser, http-errors, and morgan.

app.js

@@ -20,10 +20,11 @@ import kvRouter from "./routes/kv.js";
 var app = express();
 
 import cors from "cors";
-app.options("*", cors());
+app.options("/{*path}", cors());
 app.use(
   cors({
     exposedHeaders: ["ratelimit-policy", "retry-after", "ratelimit"], // 告诉浏览器这些响应头可以暴露
+    maxAge: 86400, // 设置OPTIONS请求的结果缓存24小时(86400秒)，减少预检请求
   })
 );
 app.disable("x-powered-by");

package.json

@@ -23,16 +23,16 @@
     "@opentelemetry/semantic-conventions": "^1.33.0",
     "@prisma/client": "6.7.0",
     "axios": "^1.9.0",
-    "body-parser": "^1.20.3",
+    "body-parser": "^2.2.0",
     "cookie-parser": "~1.4.4",
     "cors": "^2.8.5",
-    "debug": "~2.6.9",
+    "debug": "~4.4.0",
     "dotenv": "^16.5.0",
     "ejs": "^3.1.10",
-    "express": "~4.16.1",
+    "express": "~5.1.0",
     "express-rate-limit": "^7.5.0",
-    "http-errors": "~1.6.3",
+    "http-errors": "~2.0.0",
-    "morgan": "~1.9.1",
+    "morgan": "~1.10.0",
     "uuid": "^11.1.0"
   },
   "devDependencies": {