Update st dep

See https://nodesecurity.io/advisories/st_directory_traversal