Extend CI test matrix - #376

[cb skip]

Changes in 2.8.6
----------------

From HISTORY.md:

  * Improve documentation (API, context, examples...)
  * Remove additional markdown files from tarball

From the GitHub release:

== What's Changed
* Build: [email protected] and Node.js.13.12 by @smondal in expressjs/cors#189
* Update README.md for origin function callback parameters by @dstudzinski in expressjs/cors#180
* Suggest passing false for disallowed domains, not erroring by @shackpank in expressjs/cors#175
* Changed the term whitelist to allowlist in Documentation by @jkasun in expressjs/cors#200
* Fix typo in README by @alex-grover in expressjs/cors#207
* Added new link & website in the README by @manjunath00 in expressjs/cors#269
* Fix functions call with extra parameter by @LuisEGR in expressjs/cors#245
* 🐛 Fix readme status badge by @homersimpsons in expressjs/cors#306
* chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/cors#321
* ci: fix errors in ci github action for node 8 by @inigomarquinez in expressjs/cors#322
* test: improved test robustness by @Alex-GF in expressjs/cors#320
* chore: upgrade scorecard workflow pinned action versions by @carpasse in expressjs/cors#341
* ci: add CodeQL (SAST) by @bjohansebas in expressjs/cors#340
* docs: remove broken link to demo site by @dpopp07 in expressjs/cors#344
* OSSF Scorecard recommendations by @UlisesGascon in expressjs/cors#350
* build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @dependabot[bot] in expressjs/cors#351
* build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in expressjs/cors#353
* build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot[bot] in expressjs/cors#354
* build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in expressjs/cors#355
* build(deps-dev): bump express from 4.17.1 to 4.21.2 by @dependabot[bot] in expressjs/cors#356
* build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in expressjs/cors#352
* build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @dependabot[bot] in expressjs/cors#358
* update the docs for per request config by @jonchurch in expressjs/cors#338
* (fix): readme updated for #271 origin option for * by @dhananjaysa92 in expressjs/cors#289
* ci: upgrade Node versions by @UlisesGascon in expressjs/cors#359
* chore: add funding to package.json by @bjohansebas in expressjs/cors#363
* build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @dependabot[bot] in expressjs/cors#371
* build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/cors#370
* docs: Cleanup README by @efekrskl in expressjs/cors#374
* chore: add node v25 by @imangas in expressjs/cors#375
* Extend CI test matrix by @imangas in expressjs/cors#376
* docs: simplify code examples with header comments by @jonchurch in expressjs/cors#386
* docs: tweak intro, add note w/ browser enforcement, FAQ  by @jonchurch in expressjs/cors#385
* chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @Phillip9587 in expressjs/cors#388
* Release: 2.8.6 by @UlisesGascon in expressjs/cors#390

== New Contributors
* @smondal made their first contribution in expressjs/cors#189
* @dstudzinski made their first contribution in expressjs/cors#180
* @shackpank made their first contribution in expressjs/cors#175
* @jkasun made their first contribution in expressjs/cors#200
* @alex-grover made their first contribution in expressjs/cors#207
* @manjunath00 made their first contribution in expressjs/cors#269
* @LuisEGR made their first contribution in expressjs/cors#245
* @homersimpsons made their first contribution in expressjs/cors#306
* @inigomarquinez made their first contribution in expressjs/cors#321
* @Alex-GF made their first contribution in expressjs/cors#320
* @carpasse made their first contribution in expressjs/cors#341
* @bjohansebas made their first contribution in expressjs/cors#340
* @dpopp07 made their first contribution in expressjs/cors#344
* @UlisesGascon made their first contribution in expressjs/cors#350
* @dependabot[bot] made their first contribution in expressjs/cors#351
* @jonchurch made their first contribution in expressjs/cors#338
* @dhananjaysa92 made their first contribution in expressjs/cors#289
* @efekrskl made their first contribution in expressjs/cors#374
* @imangas made their first contribution in expressjs/cors#375
* @Phillip9587 made their first contribution in expressjs/cors#388

**Full Changelog**: expressjs/cors@v2.8.5...v2.8.6

Release notes: https://github.com/expressjs/cors/releases/tag/v2.8.6