chore: update risky deps

[escapedcat]

# npm audit report

@eslint/plugin-kit  <0.2.3
Severity: high
Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit - https://github.com/advisories/GHSA-7q7g-4xm8-89cq
fix available via `npm audit fix`
node_modules/@eslint/plugin-kit

cookie  <0.7.0
cookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x
fix available via `npm audit fix`
node_modules/cookie
  @bundled-es-modules/cookie  2.0.0
  Depends on vulnerable versions of cookie
  node_modules/@bundled-es-modules/cookie

cross-spawn  <7.0.5
Severity: high
Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275
fix available via `npm audit fix`
node_modules/cross-spawn

4 vulnerabilities (2 low, 2 high)