bump vulnerable ua-parser-js version

[hom3chuk]

There's a malicious ua-parser-js NPM takeover, this PR bumps ua-parser-js version to the safe 0.7.30.

Security advisory: GHSA-pjwm-rvh2-c87w
GH thread: faisalman/ua-parser-js#536

[itsjohncs]

The version we're currently at (0.7.28) is not compromised.

[hom3chuk]

7.30 is effectively the same as 7.28, it's just a matter of jumping over compromised version to minimise possible damage when upgrading in future or someone deciding to try out one minor version higher during development.

faisalman/ua-parser-js@0.7.30...0.7.28

But it's good with me if you folks keep an eye on the repo and just leave it @ 7.28! 🤓

[MaxLeiter]

Thanks @hom3chuk! But yeah, as John said, we aren't compromised and we pin our versions to (try to) avoid being affected by problems like this.