[Snyk] Upgrade commander from 4.0.0 to 4.1.1

Snyk has created this PR to upgrade commander from 4.0.0 to 4.1.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 3 versions ahead of your current version.
The recommended version was released a month ago, on 2020-02-03.

Release notes

Package name: commander

4.1.1 - 2020-02-03
Fixed
- TypeScript definition for .action() should include Promise for async ([#1157])
4.1.0 - 2020-01-06
Added
- two routines to change how option values are handled, and eliminate name clashes with command properties (#933 #1102)
  - see storeOptionsAsProperties and passCommandToAction in README
- .parseAsync to use instead of .parse if supply async action handlers (#806 #1118)
Fixed
- Remove trailing blanks from wrapped help text (#1096)
Changed
- update dependencies
- extend security coverage for Commander 2.x to 2020-02-03
- improvements to README
- improvements to TypeScript definition documentation
- move old versions out of main CHANGELOG
- removed explicit use of ts-node in tests
4.0.1 - 2019-11-11
Fixed
- display help when requested, even if there are missing required options (#1091)
4.0.0 - 2019-11-01
Added
- automatically wrap and indent help descriptions for options and commands (#1051)
- .exitOverride() allows override of calls to process.exit for additional error handling and to keep program running (#1040)
- support for declaring required options with .requiredOptions() (#1071)
- GitHub Actions support (#1027)
- translation links in README
Changed
- dev: switch tests from Sinon+Should to Jest with major rewrite of tests (#1035)
- call default subcommand even when there are unknown options (#1047)
- Breaking Commander is only officially supported on Node 8 and above, and requires Node 6 (#1053)
Fixed
- Breaking keep command object out of program.args when action handler called (#1048)
  - also, action handler now passed array of unknown arguments
- complain about unknown options when program argument supplied and action handler (#1049)
  - this changes parameters to command:* event to include unknown arguments
- removed deprecated customFds option from call to child_process.spawn (#1052)
- rework TypeScript declarations to bring all types into imported namespace (#1081)
Migration Tips

Testing for no arguments

If you were previously using code like:
```
if (!program.args.length) ...
```
a partial replacement is:
```
if (program.rawArgs.length < 3) ...
```