fix(deps): override vulnerable dependencies

Updates were done with pnpm audit --prod --fix, except for yaml which I added manually because pnpm fails to update both versions of yaml that we pull in. I also manually undid some changes to preserve our comments in pnpm-workspace.yaml which pnpm overrides.