fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-FASTXMLPARSER-7573289
- https://snyk.io/vuln/SNYK-JS-EJS-6689533

package.json

@@ -5,11 +5,11 @@
   "author": "@ClayChipps",
   "bugs": "https://github.com/ClayChipps/sf-chipps-package/issues",
   "dependencies": {
-    "@oclif/core": "^3.19.4",
+    "@oclif/core": "^3.26.3",
     "@salesforce/core": "^6.5.5",
     "@salesforce/kit": "^3.0.15",
-    "@salesforce/packaging": "^3.2.15",
-    "@salesforce/sf-plugins-core": "^5.0.13",
+    "@salesforce/packaging": "^4.1.13",
+    "@salesforce/sf-plugins-core": "^9.0.7",
     "@salesforce/ts-types": "^2.0.9"
   },
   "devDependencies": {