Update dependencies to avoid security vulnerabilities

[lresende]

What changes were proposed in this pull request?

Update dependencies to avoid security vulnerabilities

How was this pull request tested?

It wasn't tested on a runtime, so I would like to request help on validating this.

Developer's Certificate of Origin 1.1

   By making a contribution to this project, I certify that:

   (a) The contribution was created in whole or in part by me and I
       have the right to submit it under the Apache License 2.0; or

   (b) The contribution is based upon previous work that, to the best
       of my knowledge, is covered under an appropriate open source
       license and I have the right under that license to submit that
       work with modifications, whether created in whole or in part
       by me, under the same open source license (unless I am
       permitted to submit under a different license), as indicated
       in the file; or

   (c) The contribution was provided directly to me by some other
       person who certified (a), (b) or (c) and I have not modified
       it.

   (d) I understand and agree that this project and the contribution
       are public and that a record of the contribution (including all
       personal information I submit with it, including my sign-off) is
       maintained indefinitely and may be redistributed consistent with
       this project or the open source license(s) involved.

[elyra-bot]

Thanks for making a pull request to Elyra!

To try out this branch on binder, follow this link:

[kevin-bates]

LGTM.

I'm curious how you determined that these particular packages required updates and what versions to update them with? I don't believe these versions are their respective "latest" versions - thus my curiosity. (thanks)

[lresende]

@kevin-bates Not a straight answer, but I started from dependaboot report and was choosing either the latest or the recommended version without issues. There were also some transient dependency issues that influenced... If there is any dependency that you want to move to a higher version, please let me know.