Update the dependency http-errors to v2

[jaydenseric]

The dependency http-errors is a major version out of date:

http-assert/package.json

Line 13 in b072a1b

"http-errors": "~1.8.0"

This is causing problems with multiple versions of HTTP errors floating around codebases, where some are not instanceof each version's HTTP error class.

[jaydenseric]

It's also an anti-pattern to use ~ instead of ^ for the version range.

[steve-o]

Also, http-errors 2.0.0 bumps dependency for legacy depd 1.1.2 which raises security warnings due to eval:

 (!) Use of eval is strongly discouraged
 https://rollupjs.org/troubleshooting/#avoiding-eval
 ../../node_modules/.pnpm/[email protected]/node_modules/depd/index.js
 408:
 409:    // eslint-disable-next-line no-eval
 410:   var deprecatedfn = eval('(function (' + args + ') {\n' +
                           ^
 411:     '"use strict"\n' +
 412:     'log.call(deprecate, message, site)\n' +