Fix "potential" vulnerability in our dev deps #2584
Description
From https://github.com/plotly/plotly.js/network/dependencies
where pkg hoek is the culprit.
From the package-lock file on master on April 27, 2018, we have:
where bumping our direct dev-dependencies karma, jsdom and node-sass does not solve the issue. We'll most likely have to wait for request/request#2875 or a similar PR to be merged.