update deps to address CVE-2018-3760 and potentially others

Merge request reports

Loading