Update dependency csurf to v1.11.0

[mend-for-github-com]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
csurf	1.9.0 -> 1.11.0

---

Release Notes

expressjs/csurf (csurf)

v1.11.0

Compare Source

===================

• deps: cookie@0.4.0
  • Add SameSite=None support
• deps: http-errors@~1.7.3
  • deps: inherits@2.0.4

v1.10.0

Compare Source

===================

• deps: csrf@3.1.0
  • Remove base64-url dependency
  • deps: tsscmp@1.0.6
  • deps: uid-safe@2.1.5
• deps: http-errors@~1.7.2
  • Make message property enumerable for HttpErrors
  • Set constructor name when possible
  • deps: depd@~1.1.2
  • deps: inherits@2.0.3
  • deps: setprototypeof@1.1.1
  • deps: statuses@'>= 1.5.0 < 2'
• perf: remove argument reassignment
• perf: use plain object for internal cookie options

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box