Merge pull request #32 from sultan/cve

update dependencies to avoid CVE warnings