Update bl indirect dependency

[whymarrh]

GitHub has reminded us of a security advisory in one of our dependencies.

GitHub

WS-2018-0074

Vulnerable versions: < 0.9.5
Patched version: 0.9.5

Versions of bl before 0.9.5 and 1.0.1 are vulnerable to memory exposure.

bl.append(number) in the affected bl versions passes a number to Buffer constructor, appending a chunk of uninitialized memory

Yarn

yarn audit shows:

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Memory Exposure                                              │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ bl                                                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.9.5 <1.0.0 || >=1.0.1                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ react-native-level-fs                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ react-native-level-fs > levelup > bl                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/596                         │
└───────────────┴──────────────────────────────────────────────────────────────┘