JavaScript dependency security vulnerabilities

Hello,

Would you perhaps consider merging another batch of dependency lifts, similar to what you've done through #155?

As you've explained before most of them are probably development dependency issues and don't have an effect in the product itself, but it'd probably still make sense to keep them up to date and close potential loopholes.

Thanks!