Update svgo dependency to latest version

[haideralsh]

This is to resolve the Code Injection vulnerability with the js-yaml package that svgo depends on.

[ljharb]

Duplicate of #34, #35.

Also, this is not a vulnerability - it's just a false positive.

[haideralsh]

I understand it's a false positive, but as others have mentioned it creates noise in the npm audit output, especially that the vulnerability is "high".

What is the reason behind not wanting to update the dependency?

[ljharb]

It’s not about wanting; we can’t - the upgraded version is only asynchronous, and Babel transforms must be synchronous.