Bump uri library to address security issue.

[alysbrooks]

uri library change is "Treat a backslash in the authority section as a delimiter which starts the path section (CVE-2023-28628)."

I haven't contributed to this before, and there are no tests, so I'm doing this change as a PR. I looked for other deps that may have security implications.