chore: run npm audit autofix

npm audit complains about several vulnerabilities. This patch is the result of `npm audit fix`. Fix
for `next` requires major version update, isn't critical, and we plan to get rid of it anyway, so it
wasn't updated.