Update dependency send to v1 [SECURITY] (#1753)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [send](https://redirect.github.com/pillarjs/send) | dependencies |
major | [`^0.16.2` ->
`^1.0.0`](https://renovatebot.com/diffs/npm/send/0.16.2/1.1.0) |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

### GitHub Vulnerability Alerts

####
[CVE-2024-43799](https://redirect.github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg)

### Impact

passing untrusted user input - even after sanitizing it - to
`SendStream.redirect()` may execute untrusted code

### Patches

this issue is patched in send 0.19.0

### Workarounds

users are encouraged to upgrade to the patched version of express, but
otherwise can workaround this issue by making sure any untrusted inputs
are safe, ideally by validating them against an explicit allowlist

### Details

successful exploitation of this vector requires the following:

1. The attacker MUST control the input to response.redirect()
1. express MUST NOT redirect before the template appears
1. the browser MUST NOT complete redirection before:
1. the user MUST click on the link in the template

---

### Release Notes

<details>
<summary>pillarjs/send (send)</summary>

###
[`v1.1.0`](https://redirect.github.com/pillarjs/send/blob/HEAD/HISTORY.md#110--2024-09-10)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/v1.0.0...1.1.0)

\==================

-   Changes from 0.19.0

###
[`v1.0.0`](https://redirect.github.com/pillarjs/send/blob/HEAD/HISTORY.md#100--2024-07-25)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/19efaa39b98ff3ea26a90a484b9fd11efe0b37cd...v1.0.0)

\==================

-   Drop support for Node.js <18.0
-   `statuses@^2.0.1`
-   `range-parser@^1.2.1`
-   `on-finished@^2.4.1`
-   `ms@^2.1.3`
-   `mime-types@^2.1.35`
-   `http-errors@^2.0.0`
-   `fresh@^0.5.2`
-   `etag@^1.8.1`
-   `escape-html@^1.0.3`
-   `encodeurl@^2.0.0`
-   `destroy@^1.2.0`
-   `debug@^4.3.5`

###
[`v0.19.1`](https://redirect.github.com/pillarjs/send/compare/0.19.0...19efaa39b98ff3ea26a90a484b9fd11efe0b37cd)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/0.19.0...19efaa39b98ff3ea26a90a484b9fd11efe0b37cd)

###
[`v0.19.0`](https://redirect.github.com/pillarjs/send/blob/HEAD/HISTORY.md#0190--2024-09-10)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/0.18.0...0.19.0)

\===================

-   Remove link renderization in html while redirecting

###
[`v0.18.0`](https://redirect.github.com/pillarjs/send/blob/HEAD/HISTORY.md#0180--2022-03-23)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/0.17.2...0.18.0)

\===================

-   Fix emitted 416 error missing headers property
-   Limit the headers removed for 304 response
-   deps: [email protected]
    -   Replace internal `eval` usage with `Function` constructor
    -   Use instance methods on `process` to check for listeners
-   deps: [email protected]
-   deps: [email protected]
    -   deps: [email protected]
    -   deps: [email protected]
-   deps: [email protected]
-   deps: [email protected]

###
[`v0.17.2`](https://redirect.github.com/pillarjs/send/blob/HEAD/HISTORY.md#0172--2021-12-11)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/0.17.1...0.17.2)

\===================

-   pref: ignore empty http tokens
-   deps: [email protected]
    -   deps: [email protected]
    -   deps: [email protected]
    -   deps: [email protected]
-   deps: [email protected]

###
[`v0.17.1`](https://redirect.github.com/pillarjs/send/blob/HEAD/HISTORY.md#0171--2019-05-10)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/0.17.0...0.17.1)

\===================

-   Set stricter CSP header in redirect & error responses
-   deps: range-parser@~1.2.1

###
[`v0.17.0`](https://redirect.github.com/pillarjs/send/blob/HEAD/HISTORY.md#0170--2019-05-03)

[Compare
Source](https://redirect.github.com/pillarjs/send/compare/0.16.2...0.17.0)

\===================

-   deps: http-errors@~1.7.2
    -   Set constructor name when possible
    -   Use `toidentifier` module to make class names
    -   deps: depd@~1.1.2
    -   deps: [email protected]
    -   deps: statuses@'>= 1.5.0 < 2'
-   deps: [email protected]
    -   Add extensions for JPEG-2000 images
    -   Add new `font/*` types from IANA
    -   Add WASM mapping
    -   Update `.bdoc` to `application/bdoc`
    -   Update `.bmp` to `image/bmp`
    -   Update `.m4a` to `audio/mp4`
    -   Update `.rtf` to `application/rtf`
    -   Update `.wav` to `audio/wav`
    -   Update `.xml` to `application/xml`
    -   Update generic extensions to `application/octet-stream`:
        `.deb`, `.dll`, `.dmg`, `.exe`, `.iso`, `.msi`
    -   Use mime-score module to resolve extension conflicts
-   deps: [email protected]
    -   Add `week`/`w` support
    -   Fix negative number handling
-   deps: statuses@~1.5.0
-   perf: remove redundant `path.normalize` call

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - "every weekday"
(UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

aws-ts-url-shortener-cache-http/package.json

@@ -22,7 +22,7 @@
         "mime-types": "^2.1.20",
         "parseurl": "^1.3.2",
         "redis": "3.1.1",
-        "send": "^0.16.2"
+        "send": "^1.0.0"
     },
     "peerDependencies": {}
 }