Bump python packages to resolve cves (#2394)