fix: use path-to-regexp@1.9.0 to fix redos by @fengmk2 in (#12695) 8c7a461 (#12697) 7d61c89 v3.5.42...v3.5.43
