fix: update dependency to close vulnerability

[m4i3r]

Description

First of all thx for all the great work. Like many others we use serverless-offline at work. Today we got a dependabot alert for serverless-offline because it's dependency package jsonpath-plus is subject to a security vulnerability. A recent bump to Version 10.0.0 only temporarily helped as it was soon found out to still be vulnerable to RCE.

Bumped jsonpath-plus dependency from 10.0.0 to 10.1.0 to get on top of a security vulnerability with the possibility of remote code execution.

Motivation and Context

For reference you can check out the snyk report via NVD here or see the issue from jsonpath-plus here.

Screenshots (if appropriate):

[Alxblsk]

Based on this thread JSONPath-Plus/JSONPath#226, it should be ^10.2.0 at this point to fix the security vulnerability.

[m4i3r]

@Alxblsk good shout, thx! bumped the version to the latest version jsonpath-plus@10.2.0 now