dependabot noticed another dependency with security issues (#461), but lets just update all dependencies.