chore(package): bump dependencies including security fix