Update locked dependencies

This patch updates all dependencies to the latest compatible version
except for fido2 which is kept at v1 so that we make sure that we stay
compatible.  This fixes a vulnerability in urllib3.

Author: robin-nitrokey