A few remaining vulnerable dependencies

[benjsmi]

@bestbeforetoday thanks in advance for your time on this.

Two PRs open that have both passed the checks. Should be helpful for keeping us up-to-snuff on the security/dependency side of things:

#331

and

#332

[benjsmi]

And also #335

[benjsmi]

These are all good now. Thank you!