npm audit fails on master

[jwillemsen]

As visible on https://github.com/actions/setup-ruby/runs/753767260?check_suite_focus=true the npm audit fails, someone should run a npm audit fix to update all dependencies and maybe enable dependabot for this repo (https://help.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates)