fix: dependabot security issues (#4579)

apps/electron/package.json

@@ -76,7 +76,7 @@
     "async-call-rpc": "^6.3.1",
     "electron-updater": "^6.1.5",
     "link-preview-js": "^3.0.5",
-    "nanoid": "^4.0.2",
+    "nanoid": "^5.0.1",
     "yjs": "^13.6.8"
   },
   "build": {

apps/server/package.json

@@ -77,7 +77,7 @@
   "devDependencies": {
     "@affine-test/kit": "workspace:*",
     "@affine/storage": "workspace:*",
-    "@napi-rs/image": "^1.6.1",
+    "@napi-rs/image": "^1.7.0",
     "@nestjs/testing": "^10.2.6",
     "@types/cookie-parser": "^1.4.4",
     "@types/engine.io": "^3.1.7",