v0.9.3

• Simplifies Content Security Policy (CSP) headers in now.json to use default-src directive with just 'self', webpack:, hostnames (e.g. *.gstatic.com), and upgrade-insecure-requests directive (note: for better security, change 'unsafe-inline' to 'strict-dynamic' as soon as vercel/next.js#4943 lands)
• Upgrades dependencies to latest versions