chore(deps): update dependencies with CVEs

[oxy]

Update devDependencies with known CVEs.
They only process trusted data, so there is no need for us to release a security advisory; but cherry-pick updates for them nonetheless to satisfy tools like Trivy.

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (main@72ca12c). Click here to learn what that means.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #3223   +/-   ##
=======================================
  Coverage        ?   46.81%           
=======================================
  Files           ?       23           
  Lines           ?     1194           
  Branches        ?      237           
=======================================
  Hits            ?      559           
  Misses          ?      451           
  Partials        ?      184           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 72ca12c...b0edec7. Read the comment docs.

[jsjoeio]

Thanks for taking care of these 🙌