(core) another batch of dependabot updates

Summary:
Another batch of updates suggested by dependabot.

 * jsdom 16.5.0
 * terser 5.14.2
 * y18n 4.0.3
 * cached-path-relative 1.1.0
 * tar 4.4.19
 * saml2-js 2.0.5
 * jszip 3.10.1
 * path-parse 1.0.7
 * ws 6.2.2
 * normalize-url 4.5.1
 * lodash 4.17.21
 * elliptic 6.5.4
 * glob-parent 5.1.2

The only substantial change is the login bundle got slightly bigger (I think because of lodash).

Test Plan: existing tests pass

Reviewers: jarek

Reviewed By: jarek

Subscribers: jarek

Differential Revision: https://phab.getgrist.com/D3627

package.json

@@ -71,7 +71,7 @@
     "chai-as-promised": "7.1.1",
     "chance": "1.0.16",
     "esbuild-loader": "2.19.0",
-    "jsdom": "13.0.0",
+    "jsdom": "16.5.0",
     "mocha": "5.2.0",
     "mocha-webdriver": "0.2.9",
     "moment-locales-webpack-plugin": "^1.2.0",
@@ -133,7 +133,7 @@
     "jsonwebtoken": "8.3.0",
     "knockout": "3.5.0",
     "locale-currency": "0.0.2",
-    "lodash": "4.17.15",
+    "lodash": "4.17.21",
     "moment": "2.29.4",
     "moment-timezone": "0.5.35",
     "morgan": "1.9.1",
@@ -148,7 +148,7 @@
     "randomcolor": "0.5.3",
     "redis": "3.1.1",
     "redlock": "3.1.2",
-    "saml2-js": "2.0.3",
+    "saml2-js": "2.0.5",
     "short-uuid": "3.1.1",
     "tmp": "0.0.33",
     "ts-interface-checker": "1.0.2",
@@ -156,7 +156,7 @@
     "underscore": "1.9.1",
     "uuid": "3.3.2",
     "winston": "2.4.5",
-    "ws": "6.1.0"
+    "ws": "6.2.2"
   },
   "resolutions": {
     "jquery": "3.5.0",