Update the dependency http-errors to v2

The dependency http-errors is a major version out of date:

Line 13 in b072a1b

"http-errors": "~1.8.0"

This is causing problems with multiple versions of HTTP errors floating around codebases, where some are not instanceof each version's HTTP error class.

It's also an anti-pattern to use ~ instead of ^ for the version range.

Also, http-errors 2.0.0 bumps dependency for legacy depd 1.1.2 which raises security warnings due to eval:

 (!) Use of eval is strongly discouraged
 https://rollupjs.org/troubleshooting/#avoiding-eval
 ../../node_modules/.pnpm/depd@1.1.2/node_modules/depd/index.js
 408:
 409:    // eslint-disable-next-line no-eval
 410:   var deprecatedfn = eval('(function (' + args + ') {\n' +
                           ^
 411:     '"use strict"\n' +
 412:     'log.call(deprecate, message, site)\n' +

Any news?

@jonchurch

@jonchurch could you please take a look at this issue?

@Phillip9587

@Phillip9587 @UlisesGascon could anyone help to figure this out?

Any news?

I've opened #37 to resolve this. It would be great if someone is able to merge and release.

Navigation Menu

Repository navigation

Update the dependency `http-errors` to v2 #19

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Update the dependency http-errors to v2 #19

Description

Activity

jaydenseric commented on Aug 23, 2024

steve-o commented on Sep 17, 2024

mahnunchik commented on Dec 12, 2024

mahnunchik commented on Aug 22, 2025

mahnunchik commented on Sep 3, 2025

mahnunchik commented on Nov 14, 2025

jamesopstad commented on Dec 8, 2025

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

Update the dependency `http-errors` to v2 #19