Feature/4171 depd

[UlisesGascon]

Main Changes

• Upgrade to depd@2.0.0

Context

• Related outdated dependencies #4171
• Discussion (call to action) outdated dependencies #4171 (comment)

[UlisesGascon]

If you agree I will close the PR as setprototypeof is duplicated #4011, depd and cookie-signature are moved to 5.0.

[dougwilson]

Sure, though I didn't see a reason for the depd move (though I'm not going to say otherwise), but just wanted to clarify in case you thought maybe I said to move that one to 5.0.

[dougwilson]

I have been working to snake the depd update through all the sub dependencies in play here so we can land an eval-free depd in our (maybe last) 4.x release.

[dougwilson]

Ok, just as an update I am on the last major module that needs the update: http-errors. It will bump the major of that module, but I made sure that it would not affect the major version of anything within express depending on it so it will actually work out 🎉 . I am planning to have this all completed this week.