[Security] Bump hosted-git-info from 2.8.8 to 2.8.9
#206

dependabot-preview[bot] wants to merge dependabot/npm_and_yarn/hosted-git-info-2.8.9 into master

We do not currently have an analysis of these two commits