Bump sha.js in package-lock.json files (#696)

This PR bumps the `sha.js` package from `2.4.11` to `2.4.12` in any `package-lock.json` files.

Author: sachindshinde