Upgrade package parse-url to fix the security issue (#3337) (#3338)

* update package parse-url

* Revert changes to private packages

Co-authored-by: Josh Gummersall <jgummersall@microsoft.com>

Co-authored-by: Hongyang Du (hond) <hond@microsoft.com>

libraries/botbuilder-ai/package.json

@@ -34,7 +34,7 @@
     "botbuilder-core": "4.1.6",
     "botbuilder-dialogs": "4.1.6",
     "node-fetch": "^2.6.0",
-    "url-parse": "^1.4.4"
+    "url-parse": "^1.5.1"
   },
   "devDependencies": {
     "@types/node-fetch": "^2.5.7",

libraries/botbuilder-dialogs-adaptive-testing/package.json

@@ -30,7 +30,7 @@
     "botbuilder-dialogs-declarative": "4.1.6",
     "murmurhash-js": "^1.0.0",
     "nock": "^11.9.1",
-    "url-parse": "^1.4.7"
+    "url-parse": "^1.5.1"
   },
   "devDependencies": {
     "@types/nock": "^11.1.0"

yarn.lock

@@ -12571,10 +12571,10 @@ url-parse-lax@^3.0.0:
   dependencies:
     prepend-http "^2.0.0"
 
-url-parse@^1.4.4, url-parse@^1.4.7:
-  version "1.4.7"
-  resolved "https://registry.yarnpkg.com/url-parse/-/url-parse-1.4.7.tgz#a8a83535e8c00a316e403a5db4ac1b9b853ae278"
-  integrity sha512-d3uaVyzDB9tQoSXFvuSUNFibTd9zxd2bkVrDRvF5TmvWWQwqE4lgYJ5m+x1DbecWkw+LK4RNl2CU1hHuOKPVlg==
+url-parse@^1.5.1:
+  version "1.5.1"
+  resolved "https://registry.yarnpkg.com/url-parse/-/url-parse-1.5.1.tgz#d5fa9890af8a5e1f274a2c98376510f6425f6e3b"
+  integrity sha512-HOfCOUJt7iSYzEx/UqgtwKRMC6EU91NFhsCHMv9oM03VJcVo2Qrp8T8kI9D7amFf1cu+/3CEhgb3rF9zL7k85Q==
   dependencies:
     querystringify "^2.1.1"
     requires-port "^1.0.0"