January updates dependencies

[basmasking]

Except the usual updates, we also need to fix the CVE that's been created just yet.