chore(dependencies): address all minor updates as of 2021/09/17

[texastony]

Issue #, if available: Address #168, #166, #164, #161, #160, #159, #128

Description of changes: Address all minor updates for dependencies discovered by dependabot.
package and package-lock.json were generated via:

npm i [email protected] @aws-sdk/util-utf8-browser@3 @aws-sdk/util-hex-encoding@3 [email protected] [email protected];
npm install --dev  @aws-sdk/util-buffer-from@3 --dev dot-prop@6;
npm run clean; rm -rf node_modules; rm package-lock.json; npm install; npm audit fix;

However, the dev command really did not work, so there was some minor editing of the package files to ensure that none of the mentioned dependencies were added to the Prod dependencies in the package.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[josecorella]

In #166 it says to bump dot-prop but here makes it seem like we are picking up a new dependency. Is this actually the case or are we bumping it

[texastony]

I am not dead certain... the only way I can force the package-lock to resolve to dot-prop 6 is by having this here. Normally I would not add dependencies to the package.json without very good reason. Without this, dot-prop was resolving to something much lower... I think 4.2.1... which is what #166 is targeting, but it was actually lower than what we already have... so I locked it on greater than 6.

[josecorella]

lgtm 🚀