nvda

update transitive dependencies to fix security warnings

#19449

Merged