Deps updates

[wraithgar]

• deps: ip@2.0.1
• deps: @sigstore/tuf@2.3.1
• deps: semver@7.6.0
• deps: diff@5.2.0
• deps: sigstore@2.2.2
• deps: @npmcli/agent@2.2.1
• deps: hasown@2.0.1
• deps: http-proxy-agent@7.0.2
• deps: https-proxy-agent@7.0.4
• deps: lru-cache@10.2.0
• deps: socks@2.8.0
• deps: spdx-exceptions@2.5.0
• deps: spdx-license-ids@3.0.17
• chore: update devDependencies in lockfile

Closes #7216

[errodrigues]

Hi. Thanks for addressing CVE-2023-42282 here! Will the dependency on ip package also be updated to 2.0.1 on npm releases 8 and 9?

[jdom]

I'm also interested to know if the "ip" version update will be backported to npm v9

[errodrigues]

I believe it is already included in v9.9.3

[wraithgar]

Please see #7216 (comment) in re backporting