fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-IP-6240864

package.json

@@ -26,7 +26,7 @@
     "clean": "rm -rf test/fixtures/.tmp*"
   },
   "dependencies": {
-    "@npmcli/arborist": "^6.1.3",
+    "@npmcli/arborist": "^7.0.0",
     "@zkochan/cmd-shim": "^5.4.0",
     "await-event": "^2.1.0",
     "bin-links": "^2.3.0",
@@ -44,14 +44,14 @@
     "minimist": "^1.2.0",
     "moment": "^2.24.0",
     "ms": "^2.1.1",
-    "node-gyp": "^9.0.0",
+    "node-gyp": "^10.0.0",
     "node-homedir": "^1.1.1",
     "normalize-package-data": "^5.0.0",
     "npm-normalize-package-bin": "^3.0.0",
     "npm-package-arg": "^8.1.5",
     "ora": "^4.0.5",
     "p-map": "^2.1.0",
-    "pacote": "^15.0.0",
+    "pacote": "^17.0.4",
     "rc": "^1.2.8",
     "semver": "^7.0.0",
     "tar": "^6.0.0",