minor patches & bump deps

packages/hydrooj/package.json

@@ -23,10 +23,10 @@
         "@hydrooj/utils": "workspace:^",
         "@simplewebauthn/server": "13.1.1",
         "@undefined-moe/require-resolve-hook": "^1.1.0",
-        "@zip.js/zip.js": "^2.7.60",
+        "@zip.js/zip.js": "^2.7.62",
         "adm-zip": "0.5.16",
         "cac": "^6.7.14",
-        "cordis": "4.0.0-beta.2",
+        "cordis": "4.0.0-beta.4",
         "csv-stringify": "^6.5.2",
         "emoji-regex": "^10.4.0",
         "emojis-list": "2.1.0",
@@ -35,7 +35,7 @@
         "koa-proxies": "^0.12.4",
         "koa-static-cache": "^5.1.4",
         "lodash": "^4.17.21",
-        "lru-cache": "^10.4.3",
+        "lru-cache": "^11.1.0",
         "mime-types": "^3.0.1",
         "moment-timezone": "^0.5.48",
         "mongodb": "^6.16.0",
@@ -47,7 +47,7 @@
         "sanitize-filename": "^1.6.3",
         "saslprep": "^1.0.3",
         "schemastery": "^3.16.1",
-        "semver": "^7.7.1",
+        "semver": "^7.7.2",
         "shorty.js": "^1.0.1",
         "superagent": "^10.2.1",
         "tar": "6.2.1",
@@ -60,7 +60,7 @@
         "@types/fs-extra": "^11.0.4",
         "@types/js-yaml": "^4.0.9",
         "@types/koa-static-cache": "^5.1.4",
-        "@types/lodash": "^4.17.16",
+        "@types/lodash": "^4.17.17",
         "@types/mime-types": "^2.1.4",
         "@types/mongodb-uri": "^0.9.4",
         "@types/nodemailer": "^6.4.17",