Do periodic security update (yarn audit)

[wincent]

This issue is a reminder to do a periodic security update; analogous to the issue we opened in liferay-npm-tools.

This substitutes these currently open dependabot PRs:

• chore(deps): bump minimist from 1.2.0 to 1.2.3 #463 (minimist)
• chore(deps): bump websocket-extensions from 0.1.3 to 0.1.4 #491 (websocket-extensions)
• chore(deps): bump lodash from 4.17.15 to 4.17.19 #497 (lodash)
• chore(deps): bump lodash from 4.17.15 to 4.17.19 in /qa #498 (lodash, again — q/a directory)
• chore(deps): bump http-proxy from 1.18.0 to 1.18.1 #503 (http-proxy)

Will also be pushing a PR analogous to this one, which will update our dependabot config.

Please see #199 for some historical context about yarn audit in this repo; I expect we'll keep that open as the "reference" issue containing our overall policy for security-related updates in this repo, and create smaller issues like this one for periodic updates. (This repo has some old legacy dependencies, but is mostly internal/developer facing with little or no production-level/runtime exposure, so the audit output is simultaneously very noisy, but needs to be weighed appropriately given the factors which significantly mitigate risks.)

[wincent]

Adding: #506 (sinon)

[wincent]

Adding: #507 (minimist, again)

[wincent]

Adding:

• chore(deps): bump node-fetch from 2.6.0 to 2.6.1 in /qa #509 (node-fetch, qa directory)
• chore(deps-dev): bump prettier from 1.19.1 to 2.1.1 #510 (prettier)

[wincent]

Adding: #511 (lodash, again)

[wincent]

Adding: #512 (opn)

[wincent]

Adding: #516 (node-bourbon)

[wincent]

Adding: #520 (npm-keyword)

[wincent]

Adding: #523 (liferay-frontend-theme-styled)

🤦‍♂️ — no idea what actually changed between these revs (compare link doesn't work) as we don't actually control the release process. Will have to download them and compare to see the difference...

Here is the diff

Can't see any security-related differences (ie. no dependencies change).

[wincent]

Adding: #525 (eslint)

Although TBH will probably move this project into the monorepo before doing this next update.

[wincent]

Adding: #526 (got)

[wincent]

Adding: #527 (gulp-if)

[wincent]

Adding: #529 (liferay-npm-build-tools-common)

🤦‍♂️ — I love it when dependabot tells us about our own projects...

[wincent]

Adding: #530 (prettier)

[wincent]

Adding: #531 (jest)

[wincent]

Adding: #532 (resolve)

[wincent]

Adding: #537 (bl).

[wincent]

Won't be doing this in this repo — we've migrated over here.