Merge pull request #141 from transcend-io/dmattia/vuln-fixes

Vuln fixes in cookie, rollup, body-parser, and send deps

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@transcend-io/conflux",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "description": "Build zip files out of readable streams in the browser",
   "main": "dist/conflux.umd.min.js",
   "jsdelivr": "dist/conflux.umd.min.js",
@@ -83,7 +83,7 @@
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "2.29.0",
     "git-rev-sync": "^3.0.2",
-    "karma": "^6.4.2",
+    "karma": "^6.4.4",
     "karma-browserstack-launcher": "^1.6.0",
     "karma-chrome-launcher": "^3.2.0",
     "karma-coverage": "^2.2.1",
@@ -92,7 +92,7 @@
     "karma-tap": "^4.2.0",
     "live-server": "^1.2.2",
     "prettier": "^3.1.0",
-    "rollup": "^4.6.1",
+    "rollup": "^4.22.4",
     "rollup-plugin-node-polyfills": "^0.2.1",
     "rollup-plugin-terser": "^7.0.2",
     "tape": "^5.7.2"