Update dependencies for security

Routine security maintenance: none of the advisories involved affected TofuPilot, so there is nothing to do on the client side.

• Updated a third-party library to its patched release following a new security advisory.