deps: bump deps

BREAKING CHANGE: some dependencies were upgraded to versions that do not
support node@4.

Author: zkat

package-lock.json

@@ -42,16 +42,16 @@
   "license": "MIT",
   "dependencies": {
     "bluebird": "^3.5.1",
-    "cacache": "^10.0.4",
+    "cacache": "^11.0.1",
     "get-stream": "^3.0.0",
     "glob": "^7.1.2",
-    "lru-cache": "^4.1.1",
-    "make-fetch-happen": "^2.6.0",
+    "lru-cache": "^4.1.2",
+    "make-fetch-happen": "^4.0.1",
     "minimatch": "^3.0.4",
     "mississippi": "^3.0.0",
     "mkdirp": "^0.5.1",
     "normalize-package-data": "^2.4.0",
-    "npm-package-arg": "^6.0.0",
+    "npm-package-arg": "^6.1.0",
     "npm-packlist": "^1.1.10",
     "npm-pick-manifest": "^2.1.0",
     "osenv": "^0.1.5",
@@ -61,8 +61,8 @@
     "rimraf": "^2.6.2",
     "safe-buffer": "^5.1.1",
     "semver": "^5.5.0",
-    "ssri": "^5.2.4",
-    "tar": "^4.4.0",
+    "ssri": "^6.0.0",
+    "tar": "^4.4.1",
     "unique-filename": "^1.1.0",
     "which": "^1.3.0"
   },