fix: lodash CVE-2021-41720, ansi-regex CVE-2021-3807, set-value CVE-2…

[nmccready]

• lodash CVE-2021-41720
• ansi-regex CVE-2021-3807
• set-value CVE-021-23440

[JBartscher]

Hi, I've worked my way from gulp-inject to here (gulp-inject v5.0.5 uses group-array v1.0.0 which in turn uses union-value v2.0.1 which uses set-value v3.0.0 ).
All these packages contain the above CVE in the set-value-package and there can be no fix in this chain unless set-value is updated here.
It would be wonderful if the PR could be merged and we could remove this CVE from all the packages.

[carlRondoni]

I would suggest to update the minimum node 6 engine to 12 for mocha minimum supported version on version 9.

[carlRondoni]

I hope soon we can merge this MR 🙏🏼