fix(deps): update vulnerable transitive dependencies (#11335)