Security update

• tartufo cfe2064
• Merge pull request #36 from wayneashleyberry/dependabot/npm_and_yarn/y18n-4.0.1 8d6dd10
• Bump y18n from 4.0.0 to 4.0.1 6844aa5
• adds php 7.1 to testing matrix dbf2c85
• mocha@7.2.0 37be2aa

v2.0.3...v2.0.5