fix(deps): bump web test runner tools

[gavinbarron]

Closes https://github.com/microsoftgraph/microsoft-graph-toolkit/security/dependabot/290

PR Type

• Bugfix

Description of the changes

Bumps web test runner packages to bring address transitive dependency with known vulnerability

PR checklist

• Project builds (yarn build) and changes have been tested in at least two supported browsers (Edge + non-Chromium based browser)
• All public APIs (classes, methods, etc) have been documented following the jsdoc syntax
• Stories have been added and existing stories have been tested
• Added appropriate documentation. Docs PR:

• License header has been added to all new source files (yarn setLicense)
• Contains NO breaking changes

Other information

[microsoft-github-policy-service]

Thank you for creating a Pull Request @@gavinbarron.

This is a checklist for the PR reviewer(s) to complete before approving and merging this PR:

• I have verified a documentation PR has been linked and is approved (or not applicable)
• I have ran this PR locally and have tested the fix/feature
• I have verified that stories have been added to storybook (or not applicable)
• I have tested existing stories in storybook to verify no regression has occured
• I have tested the solution in at least two browsers (Edge + 1 non-Chromium based browser)

[MIchaelMainer]

Is the yarn cache intended for this checkin?

[gavinbarron]

@MIchaelMainer yes. this project keeps the cache as part of the codebase to reduce the time required in CI to do a full install