Bump which from 1.3.1 to 2.0.2

Bumps [which](https://github.com/isaacs/node-which) from 1.3.1 to 2.0.2.
- [Release notes](https://github.com/isaacs/node-which/releases)
- [Changelog](https://github.com/npm/node-which/blob/master/CHANGELOG.md)
- [Commits](npm/node-which@v1.3.1...v2.0.2)

Signed-off-by: dependabot-preview[bot] <[email protected]>

Author: dependabot-preview[bot]

package.json

@@ -17,7 +17,7 @@
   "devDependencies": {
     "cross-env": "^6.0.3",
     "mocha": "^5.2.0",
-    "which": "^1.2.0"
+    "which": "^2.0.2"
   },
   "dependencies": {
     "ampersand-state": "^5.0.3",