Resolve vulnerable dependancies and allow use of later versions

[gwestwood]

I've used snyk to report vulnerabilities and amended the requirements file to allow use of later versions.