Updates dependencies (#23)

Should close out
https://github.com/github/arianotify-polyfill/security/dependabot/4.

Updates dependencies to solve security vuln -- this PR does update more
than just the vulnerable `koa` package, so if you'd prefer I open a PR
just targeting that package, let me know!

Author: smockle