deps

Audit dependency risks and updates.