Patch the apparently unpatchable: fix got CVE-2022-33987 exposure

Author: ryanblock

package.json

@@ -50,7 +50,7 @@
     "send": "~0.18.0",
     "server-destroy": "~1.0.1",
     "tree-kill": "~1.2.2",
-    "update-notifier": "5.1.0",
+    "update-notifier-cjs": "~5.1.3",
     "ws": "~8.8.1"
   },
   "devDependencies": {

src/cli/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 let cli = require('./index.js')
 let pkg = require('../../package.json')
-let update = require('update-notifier')
+let update = require('update-notifier-cjs')
 let ver = pkg.version
 
 /**