fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DOTPROP-543489
- https://snyk.io/vuln/SNYK-JS-LODASHTEMPLATE-1088054
- https://snyk.io/vuln/SNYK-JS-REQUEST-3361831
- https://snyk.io/vuln/SNYK-JS-TOUGHCOOKIE-5672873
- https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660

package.json

@@ -138,8 +138,8 @@
  "c8": "^7.4.0",
  "chalk": "^2.4.1",
  "chrome-devtools-frontend": "1.0.922924",
- "conventional-changelog-cli": "^1.3.4",
- "cpy": "^7.0.1",
+ "conventional-changelog-cli": "^2.0.7",
+ "cpy": "^9.0.0",
  "cross-env": "^7.0.2",
  "csv-validator": "^0.0.3",
  "devtools-protocol": "0.0.901419",
@@ -156,7 +156,7 @@
  "idb-keyval": "2.2.0",
  "intl-messageformat-parser": "^1.8.1",
  "jest": "27.1.1",
- "jsdom": "^12.2.0",
+ "jsdom": "^16.6.0",
  "jsonld": "^5.2.0",
  "jsonlint-mod": "^1.7.6",
  "lighthouse-plugin-publisher-ads": "^1.4.1",