Dependabot updates

[allly-b]

Issue description

Some of our dependabot security updates didn't auto-open PRs in our repo, which means we need to manually apply those dependency updates. At the time of writing this, there are just 2 updates needed (note that each one is appearing twice, for a total of 4 entries even though it's just two packages that need to be updated).

Acceptance criteria

• update the dependencies mentioned in our dependabot page
• close the alerts when done

Additional context

when closing the alerts you can just close them as "a fix has already been started'

Links to other issues

No response

[allly-b]

priority is high as we should make sure to bring in the newest updates to our dependencies in a timely manner.