fix: package.json & package-lock.json to reduce vulnerabilities (#50)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-YAML-5458867

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

package.json

@@ -45,7 +45,7 @@
     "contentful-import": "^8.3.2",
     "contentful-management": "^7.45.2",
     "contentful-migration": "^4.9.2",
-    "cosmiconfig": "^7.0.1",
+    "cosmiconfig": "^8.0.0",
     "deep-diff": "^1.0.2",
     "diff": "^5.1.0",
     "dotenv": "^10.0.0",