chore: update set-value to >=4.0.1

[iamhopaul123]

Fix dependabot alert

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the Apache 2.0 License.

[efekarakus]

shouldn't we be updating the dependencies section instead of modifying package-lock?
https://github.com/aws/copilot-cli/blob/mainline/cf-custom-resources/package.json#L25

[iamhopaul123]

yeah that's why i put the label before 😃 now fixed

[iamhopaul123]

I still didn't add it to the package file because we don't directly depend on that package.

[efekarakus]

But won't it get overridden, I don't get how it's fixed 😅
My understanding is that package-lock isnt' meant to be modified manually. If we ever upgrade a dependency in package.json, and run npm install then I think it will reset these changes, I'd expected the following to be our enforcing mechanism:

"dependencies": {
   "set-value": ">=4.0.1",

[iamhopaul123]

Hmm i tried to do npm install and it didn't revert the change. But sure I'll just add it to package.json