Stop colors.js vandalism (#10131)

* fix: pin colors to 1.4.0

* fix: exclude colors from renovate updates

install/package.json

@@ -41,7 +41,7 @@
         "chart.js": "^2.9.4",
         "cli-graph": "^3.2.2",
         "clipboard": "^2.0.6",
-        "colors": "^1.4.0",
+        "colors": "1.4.0",
         "commander": "^7.1.0",
         "compare-versions": "3.6.0",
         "compression": "^1.7.4",

renovate.json

@@ -6,7 +6,8 @@
   "packageRules": [
     {
       "updateTypes": ["minor", "patch", "pin", "digest"],
-      "automerge": true
+      "automerge": true,
+      "excludePackageNames": ["colors"]
     }
   ]
 }