Update dependencies, address PHPUnit security advisory

• Note: Only development dependencies are affected. Production deployments should be unaffected.