Fix update-notifier vulnerability

[alexandre-lelain]

What this PR does

Upgrade update-notifier@^3.0.1 to update-notifier@^4.1.0.

This is a major version upgrade, but the code is not impacted by the breaking-changes listed in its changelog: https://github.com/yeoman/update-notifier/releases.

Why

This upgrade solves the following security issue from dot-prop package in versions < 5.1.1: GHSA-ff7x-qrg7-qggm.

Related issues

Solves #112.

[anikethsaha]

it looks like there are some breaking changes in the upstream/

Can you check that ?

[alexandre-lelain]

Hello @anikethsaha ,

I'm not too familliar with this project so I'm afraid I do not see what you mean by "upstream" ?

[anikethsaha]

I meant update-notifier. can you compare the release cause we need to check if that release is breaking ours or not

[alexandre-lelain]

I see, thanks. Just like I wrote it in the PR's description, the breaking-changes of update-notifier@^4.0.0 listed in its release notes should not impact docsify-cli's codebase.

update-notifier is only used there: https://github.com/docsifyjs/docsify-cli/blob/master/lib/cli.js#L7, and the v4 doesn't seem to impact it, based on their changelog.

Also, the tests & build passed, and I tested the cli on another project. The cli's output was the same.

[anikethsaha]

Thanks a lot