fix: 🐛 Fix merge package vulnerability

Merge package has a security vulnerability that is fixed in a newer
version. We do not resolve merge directly, but as a dependecy of a
dependecy, so we especify a version range via selective dependecy
resolution.

package.json

@@ -59,7 +59,8 @@
     "hoek": "~4.2.0",
     "elliptic": "~6.5.4",
     "react-dev-utils": "~11.0.4",
-    "yargs-parser": "~20.2.7"
+    "yargs-parser": "~20.2.7",
+    "merge": "^2.1.1"
   },
   "config": {
     "commitizen": {