chore: bump production dependencies within SemVer ranges

To resolve some security alerts:

```diff
- found 223 vulnerabilities (24 low, 129 moderate, 69 high, 1 critical)
+ found 198 vulnerabilities (24 low, 129 moderate, 44 high, 1 critical)
```

All changelogs reviewed manually for breaking changes and there are none. More updates are coming in the follow-up PRs.

Fixes karma-runner#3680

package.json

@@ -419,26 +419,26 @@
   "dependencies": {
     "body-parser": "^1.19.0",
     "braces": "^3.0.2",
-    "chokidar": "^3.4.2",
+    "chokidar": "^3.5.1",
     "colors": "^1.4.0",
     "connect": "^3.7.0",
     "di": "^0.0.1",
     "dom-serialize": "^2.2.1",
-    "glob": "^7.1.6",
-    "graceful-fs": "^4.2.4",
+    "glob": "^7.1.7",
+    "graceful-fs": "^4.2.6",
     "http-proxy": "^1.18.1",
-    "isbinaryfile": "^4.0.6",
-    "lodash": "^4.17.19",
-    "log4js": "^6.2.1",
-    "mime": "^2.4.5",
+    "isbinaryfile": "^4.0.8",
+    "lodash": "^4.17.21",
+    "log4js": "^6.3.0",
+    "mime": "^2.5.2",
     "minimatch": "^3.0.4",
     "qjobs": "^1.2.0",
     "range-parser": "^1.2.1",
     "rimraf": "^3.0.2",
     "socket.io": "^3.1.0",
     "source-map": "^0.6.1",
-    "tmp": "0.2.1",
-    "ua-parser-js": "^0.7.23",
+    "tmp": "^0.2.1",
+    "ua-parser-js": "^0.7.28",
     "yargs": "^16.1.1"
   },
   "devDependencies": {