Merge dependabot PRs

[joshfng]

Issue Summary

There are a bunch of dep PRs that address CVEs -> is:pr is:open label:dependencies

Please merge these, and release a new docker image

[arikfr]

Except for one the other dependencies are frontend ones and it's less likely to pose a security issue. Is there a specific CVE you felt like is urgent to address?

[joshfng]

Is there a specific CVE you felt like is urgent to address?

Not particularly, no. We just have security policies that nag about any vulns in our images.

Is there a validation process needed for dependabot vuln PRs?