Bump package-lock.json

Fixes an out of date dependency blocking pr analysis in the pipeline.

Author: kieo-ch