v5: actually drop Express from the main package's dependencies (#8094)

Forgot to do this previously when making the standalone server not use
Express.

Author: glasser

.changeset/smart-impalas-pump.md

@@ -0,0 +1,2 @@
+---
+---

package-lock.json

@@ -51,6 +51,8 @@
     "@types/async-retry": "1.4.9",
     "@types/body-parser": "1.19.6",
     "@types/cors": "2.8.19",
+    "@types/express": "^4.17.13",
+    "@types/express-serve-static-core": "^4.17.30",
     "@types/finalhandler": "1.2.4",
     "@types/lodash.sumby": "4.6.9",
     "@types/negotiator": "0.6.4",

package.json

@@ -136,13 +136,10 @@
     "@apollo/utils.usagereporting": "^2.1.0",
     "@apollo/utils.withrequired": "^3.0.0",
     "@graphql-tools/schema": "^10.0.0",
-    "@types/express": "^4.17.13",
-    "@types/express-serve-static-core": "^4.17.30",
     "async-retry": "^1.2.1",
     "body-parser": "^2.2.0",
     "cors": "^2.8.5",
     "finalhandler": "^2.1.0",
-    "express": "^4.21.1",
     "loglevel": "^1.6.8",
     "lru-cache": "^11.1.0",
     "negotiator": "^1.0.0",