Update st and request deps

See https://nodesecurity.io/advisories/st_directory_traversal