fix(security): update dependencies

[boidolr]

This PR contains a:

• [ ] bugfix
• [ ] new feature
• [x] code refactor
• [ ] test update
• [ ] typo fix
• [ ] metadata update

Motivation / Use-Case

Currently there are several warnings for outdated libraries. These block further changes. See https://david-dm.org/webpack-contrib/jshint-loader

Breaking Changes

No breaking changes.

Additional Info

Unfortunately the handling of paths had to be changed, as the updated version of rcloader handles merging differently and would return objects containing the characters of the path otherwise ({ '0': 't', '1': 'e', '2': 's', '3': 't', '4': '/', '5': 'f', '6': 'i', '7': 'x', '8': 't', '9': 'u', '10': 'r', '11': 'e', '12': 's', '13': '/', ... }).

[jsf-clabot]

All committers have signed the CLA.

[nullivex]

This looks like it should be good to merge. Any reason why there is a 6 month delay?