chore: update remark dev dependencies (#827)

The real motivation here is to stop getting notified about the
vulnerable [email protected] in package-lock.json.

Author: Trott