housekeeping: npm audit resolutions (via #5457)

* add `security-audit` script

* npm audit fix

* remove nyc

* nightwatch@1

this breaks the test suite, but it appears to have already regressed. leaving it for another day, TODO: open a backlog ticket

* add `security-audit` script

* disable mocha exclusivity

* update package-lock.json

* cypress@3.4.0

* `npm audit fix`

* @release-it/conventional-changelog@1.1.0

* release-it@12

test/e2e-selenium/scenarios/bugs/4374.js

@@ -6,7 +6,6 @@ describe("bug #4374: OAS3 parameters should be visibly validated in Try-It-Out",
             .page.main()
 
         client.waitForElementVisible(".download-url-input:not([disabled])", 10000)
-            .pause(1000)
             .clearValue(".download-url-input")
             .setValue(".download-url-input", "/test-specs/bugs/4374.yaml")
             .click("button.download-url-button")