Bump webpack extension deps to fix security issues