chore(deps): bump serve-static and express (#6250)

* chore(deps): bump serve-static and express

Bumps [serve-static](https://github.com/expressjs/serve-static) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `serve-static` from 1.15.0 to 1.16.2
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...v1.16.2)

Updates `express` from 4.19.2 to 4.21.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.0/History.md)
- [Commits](expressjs/express@4.19.2...4.21.0)

---
updated-dependencies:
- dependency-name: serve-static
  dependency-type: indirect
- dependency-name: express
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* update PR to PR target

* change event types

* undo PR target change

* update token permissions

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jon Harrell <[email protected]>

.github/workflows/check-all-links.yml

@@ -3,6 +3,13 @@ name: Check all content (MDX) links
 on:
   pull_request:
 
+permissions:
+  actions: read
+  checks: read
+  contents: read
+  issues: write
+  pull-requests: read
+
 jobs:
   check-for-absolute-urls:
     name: "Check for absolute prisma.io urls"

.github/workflows/list-changed-pages.yml

@@ -6,6 +6,13 @@ on:
     paths:
       - "content/**/*"
 
+permissions:
+  actions: read
+  checks: read
+  contents: read
+  issues: write
+  pull-requests: read
+
 jobs:
   post-files-changed-comment:
     name: "Post files changed comment"