fix(deps): bump which from 1.3.1 to 2.0.2

Bumps [which](https://github.com/isaacs/node-which) from 1.3.1 to 2.0.2.
- [Release notes](https://github.com/isaacs/node-which/releases)
- [Changelog](https://github.com/npm/node-which/blob/master/CHANGELOG.md)
- [Commits](npm/node-which@v1.3.1...v2.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

packages/dredd/package.json

@@ -54,7 +54,7 @@
     "spawn-args": "0.2.0",
     "untildify": "4.0.0",
     "uuid": "7.0.3",
-    "which": "1.3.1",
+    "which": "2.0.2",
     "winston": "2.4.0"
   },
   "devDependencies": {

yarn.lock

@@ -7201,7 +7201,7 @@ which@1, which@1.3.1, which@^1.2.9, which@^1.3.1:
   dependencies:
     isexe "^2.0.0"
 
-which@^2.0.1:
+which@2.0.2, which@^2.0.1:
   version "2.0.2"
   resolved "https://registry.yarnpkg.com/which/-/which-2.0.2.tgz#7c6a8dd0a636a0327e10b59c9286eee93f3f51b1"
   integrity sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==