update broccoli

Fixes a vulnerability