add resolutions for security dependencies that dependabot can't handle

Author: kebetsi

package.json

@@ -96,10 +96,16 @@
     "vue-style-loader": "^3.0.1",
     "vue-template-compiler": "^2.5.17",
     "webpack": "^3.6.0",
-    "webpack-bundle-analyzer": "^2.9.0",
+    "webpack-bundle-analyzer": "^3.3.2",
     "webpack-dev-server": "^3.1.11",
     "webpack-merge": "^4.1.0"
   },
+  "resolutions": {
+    "**/js-yaml": "^3.13.1",
+    "**/ssri": "^8.0.1",
+    "**/is-svg": "^4.2.2",
+    "yargs-parser": "^13.1.2"
+  },
   "engines": {
     "node": ">= 12.0.0",
     "npm": ">= 6.0.0"