On branch release/v1.5 we are missing security updates from dependabot. Identify and update packages that have a current fix. Also list out what CVE are resolved from this work