fix(dependencies): update smaller production dependencies

Most of the updates are within allowed SemVer range. tmp and rimraf dropped support for ancient Node versions, which are not supported by Karma anyways.

package.json

@@ -393,25 +393,25 @@
     "body-parser": "^1.16.1",
     "braces": "^3.0.2",
     "chokidar": "^3.0.0",
-    "colors": "^1.1.0",
+    "colors": "^1.4.0",
     "connect": "^3.6.0",
     "di": "^0.0.1",
-    "dom-serialize": "^2.2.0",
-    "flatted": "^2.0.0",
-    "glob": "^7.1.1",
-    "graceful-fs": "^4.1.2",
+    "dom-serialize": "^2.2.1",
+    "flatted": "^2.0.2",
+    "glob": "^7.1.6",
+    "graceful-fs": "^4.2.4",
     "http-proxy": "^1.13.0",
-    "isbinaryfile": "^4.0.2",
-    "lodash": "^4.17.14",
+    "isbinaryfile": "^4.0.6",
+    "lodash": "^4.17.15",
     "log4js": "^4.0.0",
-    "mime": "^2.3.1",
-    "minimatch": "^3.0.2",
+    "mime": "^2.4.5",
+    "minimatch": "^3.0.4",
     "qjobs": "^1.1.4",
     "range-parser": "^1.2.0",
-    "rimraf": "^2.6.0",
+    "rimraf": "^3.0.2",
     "socket.io": "2.1.1",
     "source-map": "^0.6.1",
-    "tmp": "0.0.33",
+    "tmp": "0.2.1",
     "ua-parser-js": "0.7.21",
     "yargs": "^15.3.1"
   },