Release: 1.12.0

[UlisesGascon]

What's included in the HISTORY.md

1.12.0
======
  * Security fix for [CVE-2026-15603](https://www.cve.org/CVERecord?id=CVE-2026-15603)([GHSA-jxfw-x594-9x9m](https://github.com/expressjs/morgan/security/advisories/GHSA-jxfw-x594-9x9m))
  * Allow format functions to return objects for streams in `objectMode`
  * Respect the `NO_COLOR` environment variable in the `dev` format

What's Changed

• fix: upgrade http:// to https:// in README by @hanu-14 in fix: upgrade http:// to https:// in README #363
• build: bump github actions and dev dependencies by @sheplu in build: bump github actions and dev dependencies #369
• chore(ci): npm-publish via reusable workflows by @sheplu in chore(ci): npm-publish via reusable workflows #334
• docs: add ES modules import example by @aladi-debug in docs: add ES modules import example #352
• docs: fix README lint errors by @UlisesGascon in docs: fix README lint errors #373
• ci: use latest patch per Node.js major, add 23-26 by @UlisesGascon in ci: use latest patch per Node.js major, add 23-26 #374
• feat: pass objects through to streams in objectMode by @UlisesGascon in feat: pass objects through to streams in objectMode #375
• feat: NO_COLOR env var removes color in dev format by @jonchurch in feat: NO_COLOR env var removes color in dev format #377

New Contributors

• @hanu-14 made their first contribution in fix: upgrade http:// to https:// in README #363
• @sheplu made their first contribution in build: bump github actions and dev dependencies #369
• @aladi-debug made their first contribution in docs: add ES modules import example #352

Full Changelog: 1.11.0...master