chore: avoid vulnerabilities in dev dependencies

package.json

@@ -59,24 +59,24 @@
     "winston": "2.2.0"
   },
   "devDependencies": {
-    "@commitlint/cli": "7.3.2",
+    "@commitlint/cli": "7.4.0",
     "@commitlint/config-conventional": "7.3.1",
-    "@commitlint/travis-cli": "7.3.2",
+    "@commitlint/travis-cli": "7.4.0",
     "body-parser": "1.18.3",
     "coffeescript": "1.12.7",
     "coveralls": "3.0.2",
-    "eslint": "5.11.1",
+    "eslint": "5.12.1",
     "eslint-config-airbnb-base": "13.1.0",
-    "eslint-plugin-import": "2.14.0",
-    "express": "4.16.3",
+    "eslint-plugin-import": "2.16.0",
+    "express": "4.16.4",
     "istanbul": "0.4.5",
-    "lcov-result-merger": "1.2.0",
+    "lcov-result-merger": "3.1.0",
     "mocha": "5.2.0",
     "mocha-lcov-reporter": "1.3.0",
-    "nock": "10.0.4",
+    "nock": "10.0.6",
     "ps-node": "0.1.6",
     "semantic-release": "15.13.3",
-    "sinon": "6.1.5"
+    "sinon": "7.2.3"
   },
   "keywords": [
     "api",