fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PUGCODEGEN-7086056
- https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6141137
- https://snyk.io/vuln/SNYK-JS-FOLLOWREDIRECTS-6444610

package.json

@@ -53,7 +53,7 @@
     "any-shell-escape": "^0.1.1",
     "autoprefixer": "^10.4.16",
     "aws-sdk": "^2.1467.0",
-    "axios": "^1.6.0",
+    "axios": "^1.6.8",
     "bcrypt": "^5.1.1",
     "chalk": "^4.1.2",
     "check-node-version": "^4.2.1",
@@ -70,7 +70,7 @@
     "node-fetch": "^2.6.7",
     "node-vibrant": "^3.2.1-alpha.1",
     "prompt": "^1.3.0",
-    "pug": "^3.0.2",
+    "pug": "^3.0.3",
     "sanitize-filename": "^1.6.3",
     "sharp": "^0.32.6",
     "stream-to-array": "^2.3.0",