fix: raise dependency security baseline

fix: raise dependency security baseline #25