deps: pull in dependency updates with bugfixes

* new pacote fixes several git-related bugs
* ssri update fixes crash on early node@4 versions
* make-fetch-happen update fixes more proxy-related issues
* npm-user-validate adds regex for blocking usernames with illegal chars

Credit: @zkat

Author: zkat

node_modules/cacache/CHANGELOG.md

@@ -38,7 +38,7 @@
     "aproba": "~1.1.1",
     "archy": "~1.0.0",
     "bluebird": "~3.5.0",
-    "cacache": "~9.2.5",
+    "cacache": "~9.2.6",
     "call-limit": "~1.1.0",
     "chownr": "~1.0.1",
     "cmd-shim": "~2.0.2",
@@ -78,12 +78,12 @@
     "npm-install-checks": "~3.0.0",
     "npm-package-arg": "~5.0.1",
     "npm-registry-client": "~8.3.0",
-    "npm-user-validate": "~0.1.5",
+    "npm-user-validate": "~1.0.0",
     "npmlog": "~4.1.0",
     "once": "~1.4.0",
     "opener": "~1.4.3",
     "osenv": "~0.1.4",
-    "pacote": "~2.7.21",
+    "pacote": "~2.7.24",
     "path-is-inside": "~1.0.2",
     "promise-inflight": "~1.0.1",
     "read": "~1.0.7",
@@ -101,7 +101,7 @@
     "slide": "~1.1.6",
     "sorted-object": "~2.0.1",
     "sorted-union-stream": "~2.1.3",
-    "ssri": "~4.1.3",
+    "ssri": "~4.1.4",
     "strip-ansi": "~3.0.1",
     "tar": "~2.2.1",
     "text-table": "~0.2.0",