ci: fixed broken ci

[lamweili]

fixed ci

• ci regression from 1fc9682
  • ci: migrated to new codecov upload
  • ci: support older Node.js (removed unsupported devDependencies)
• ci improvements and better coverage
  • ci: added weekly npm audit to check for vul in prod deps
  • ci: support Node.js 18.x
  • ci: updated gh actions from v2 to v3

fixed test causing ci to fail

• test: fixed an issue with test timeout as stream wasn't ready

security fixes

• chore(deps-dev): bumped mocha from 6.2.2 to 6.2.3

[codecov-commenter]

Codecov Report

Merging #1744 (c122c42) into master (29fd1f9) will not change coverage.
The diff coverage is n/a.

❗ Current head c122c42 differs from pull request most recent head 14b2386. Consider uploading reports for the commit 14b2386 to get more accurate results

@@           Coverage Diff           @@
##           master    #1744   +/-   ##
=======================================
  Coverage   94.09%   94.09%           
=======================================
  Files          14       14           
  Lines        1135     1135           
=======================================
  Hits         1068     1068           
  Misses         67       67           

Impacted Files	Coverage Δ
src/node/http2wrapper.js	96.26% <ø> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

[lamweili]

@titanism, please review this if you have this time. 🙏
No release is needed as this doesn't affect the code.