chore: bump version of vulnerable dependencies

[piksel]

Bumps versions of dependencies to non-vulnerable ones. Since the upstream dependency on runc is bumped in v1.6 of containerd we need to use a replace. This can be removed when the next version of containerd is stable.

[codecov]

Codecov Report

Merging #1172 (45ca9aa) into main (d2f1185) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #1172   +/-   ##
=======================================
  Coverage   61.89%   61.89%           
=======================================
  Files          23       23           
  Lines        1475     1475           
=======================================
  Hits          913      913           
  Misses        476      476           
  Partials       86       86           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d2f1185...45ca9aa. Read the comment docs.