chore: fix dependabot vulnerabitlities