fixing security vulnerabillities reported by users of snyk and npm audit major versions of deps were bumped and should only impact development of qrcode.
npm audit
no breaking changes. promoting to a stable semver