Merge pull request #19 from cqframework/dependencies-update-feb2022

Updating two transitive dependencies to address security advisories.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "cql-exec-vsac",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -22,15 +22,19 @@
     "xml2js": "^0.4.23"
   },
   "devDependencies": {
-    "chai": "^4.2.0",
+    "chai": "^4.3.4",
     "chai-as-promised": "^7.1.1",
     "cql-execution": ">=1.2.0",
-    "eslint": "^7.11.0",
+    "eslint": "^8.3.0",
     "fs-extra": "^8.1.0",
-    "mocha": "^8.2.0",
+    "mocha": "9.2.0",
     "nock": "^13.0.4"
   },
   "peerDependencies": {
     "cql-execution": ">=1.2.0"
+  },
+  "resolutions": {
+    "lodash": "^4.17.21",
+    "json-schema": "^0.4.0"
   }
 }