tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

I found this old-ish issue which I suspect should be closed: https://github.com/commitizen/cz-cli/issues/883

But even the latest version of commitizen contains the following issue:

```sh
# npm audit report

tmp <=0.2.3
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter - https://github.com/advisories/GHSA-52f5-9888-hmc6
```

Caused by:

```sh
├─┬ commitizen@4.3.1
│ └─┬ inquirer@8.2.5
│ └─┬ external-editor@3.1.0
│ └── tmp@0.0.33
```

This issue is still not fixed as of now, even in the latest `inquirer` version. But once this issue is resolved, the `inquire` package should be updated: https://github.com/SBoudrias/Inquirer.js/issues/1802

首先运行 npm audit，并检查 issue 中显示的依赖链：commitizen 4.3.1、inquirer 8.2.5、external-editor 3.1.0 和 tmp 0.0.33。检查所引用的上游 issue，以确定已解决该问题的版本，然后更新受影响的依赖项，并验证 npm audit 不再报告 GHSA-52f5-9888-hmc6。

由索引模型根据 Issue 内容生成。