housekeeping: npm audit resolutions (via #5457)

* add `security-audit` script

* npm audit fix

* remove nyc

* nightwatch@1

this breaks the test suite, but it appears to have already regressed. leaving it for another day, TODO: open a backlog ticket

* add `security-audit` script

* disable mocha exclusivity

* update package-lock.json

* cypress@3.4.0

* `npm audit fix`

* @release-it/conventional-changelog@1.1.0

* release-it@12

test/e2e-selenium/scenarios/oas3/callbacks.js

@@ -7,7 +7,6 @@ describe("render pet api container", function () {
     .page.main()
 
     client.waitForElementVisible(".download-url-input:not([disabled])", 5000)
-    .pause(5000)
     .clearValue(".download-url-input")
     .setValue(".download-url-input", "http://localhost:3230/test-specs/callbacks.openapi.yaml")
     .click("button.download-url-button")