deps: bump hosted-git-info to 3.0.2

BREAKING CHANGE: this drops support for ancient node versions.
See npm/hosted-git-info#38 (comment)

Author: isaacs

package-lock.json

@@ -10,7 +10,7 @@
     "npa.js"
   ],
   "dependencies": {
-    "hosted-git-info": "^2.8.5",
+    "hosted-git-info": "^3.0.2",
     "osenv": "^0.1.5",
     "semver": "^5.6.0",
     "validate-npm-package-name": "^3.0.0"