pull in cqm-models v4.1.2

[adongare]

This PR has following changes:

• pull cqm-models v4.1.2
• fixed https://oncprojectracking.healthit.gov/support/browse/BONNIEMAT-1096, results of aggregate functions ignored if it is 0
• few Security vulnerabilities

Pull requests into cqm-execution require the following. Submitter and reviewer should ✅ when done. For items that are not-applicable, note it's not-applicable ("N/A") and ✅.

Submitter:

• This pull request describes why these changes were made.
• Internal ticket for this PR:
• Internal ticket links to this PR
• Code diff has been done and been reviewed
• Tests are included and test edge cases
• Tests have been run locally and pass

Reviewer 1:

Name:

• Code is maintainable and reusable, reuses existing code and infrastructure where appropriate, and accomplishes the task’s purpose
• The tests appropriately test the new code, including edge cases
• You have tried to break the code

Reviewer 2:

Name:

• Code is maintainable and reusable, reuses existing code and infrastructure where appropriate, and accomplishes the task’s purpose
• The tests appropriately test the new code, including edge cases
• You have tried to break the code

[adongare]

Hi @dczulada, can you please review this? this pulls in cqm-models v4.1.2 to provide CQM is operator suport for entities. Also, addresses few vulnerabilities.

[adongare]

this is to fix the issue where results of aggregate functions being ignored if it is 0 (https://oncprojectracking.healthit.gov/support/browse/BONNIEMAT-1096)

[adongare]

I'm ignoring the vulnerability with word-wrap as there is no fix/patch available and it is dev dependency.