update dependencies

[keturn]

Now that IntelliJ checks dependencies against a vulnerability database, we see gestalt pulling in some dependencies with known CVEs. Either directly or transitively through things like Reflections.

We should update the dependencies or add constraints to the transitive dependencies, as appropriate.

Related to MovingBlocks/Terasology#5021