All: Update deps, upgrade lockfile version from 1 to 2

Newer npm versions regenerate the lockfile to v2.

The dependency updates should resolve some dependabot security reports.

Author: mgol