Update outdated NPM packages to resolve outstanding vulnerabilities

<!-- Please complete the template below as best as you can. Make sure to check if this issue has already been raised by someone else first to avoid duplication. 

For each section below, please add screenshots or links or anything that may help visual learners understand the problem better, even if this takes you an extra minute or two this is a great help to some folks.

https://www.learning-styles-online.com/style/visual-spatial/

-->

### Problem

Currently, there are a number of long outstanding (300 days or greater) security issues that we need to resolve. Those issues outlined below require can resolved by updating NPM packages. These range from simple to potentially more complex like updating Webpack. 

### Proposal

<!-- Consult with `@gitlab-com/business-technology/enterprise-apps/zuora-architects` on the ~"Enterprise Applications" team if Zuora business logic is involved. -->

- [ ] Update the packages shown below either incrementally or in bulk as needed or convenient to mitigate the associated CVEs. 

| AGE\_IN\_DAYS | GROUP\_NAME | STAGE       | URL                                                                                                                              | STATE | Notes                                       | Location | Package              |
| ------------- | ----------- | ----------- | -------------------------------------------------------------------------------------------------------------------------------- | ----- | ------------------------------------------- | -------- | -------------------- |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2989](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2989) | MR submitted: gitlab-org/customers-gitlab-com!4460  | Backlog; Requies updating a dependency      | NPM      | dot-prop             |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2988](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2988) | MR submitted: gitlab-org/customers-gitlab-com!4460  | Backlog; Requies updating a dependency      | NPM      | Elliptic             |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2983](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2983) | MR submitted: gitlab-org/customers-gitlab-com!4460  | Backlog; Requies updating a dependency      | NPM      | websocket-extensions |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2984](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2984) | MR submitted: gitlab-org/customers-gitlab-com!4460    | Backlog; Requies updating a dependency      | NPM      | serialize-javascript |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2990](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2990) | [MR submitted](https://gitlab.com/gitlab-org/customers-gitlab-com/-/merge_requests/4427) | Backlog; Requies updating a dependency      | NPM      | URI.js / urljs       |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2979](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2979) | MR submitted: gitlab-org/customers-gitlab-com!4460 | Backlog; Requies updating a dependency      | NPM      | ini                  |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2980](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2980) | MR submitted: gitlab-org/customers-gitlab-com!4460  | Backlog; Requies updating a dependency      | NPM      | y18n                 |
| 300           | license     | fulfillment | [https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2985](https://gitlab.com/gitlab-org/customers-gitlab-com/issues/2985) | Open  | Backlog; Requies updating many dependencies | NPM      | kind-of              |

### Result

Updated `yarn.lock`

### Next steps (if any)

Advise if there is a way that we can autogenerate MRs for package updates regularly or some other sensible process change to stay ahead of the NPM wave. 

### How will we measure success?

A `yarn audit` run will without reporting the following issues above. 

/cc @jeromezng @jameslopez @rhardarson

Story points: 2.0