Allowable minimist version has critical security advisory

[olets]

spider-pig uses minimist ^1.2.5

https://github.com/zachleat/spider-pig/blob/7d1e28d641891000c3b97550d31cc107cb0ea781/package.json#L35

1.2.5 has a critical security advisory https://github.com/advisories/GHSA-xvch-5gv4-984h

The vulnerability is patched in minimist 1.2.6