Bump dependencies versions to address dependabot alerts

[lostella]

Issue #, if available: See

• https://github.com/awslabs/gluonts/security/dependabot/16
• https://github.com/awslabs/gluonts/security/dependabot/17
• https://github.com/awslabs/gluonts/security/dependabot/18
• https://github.com/awslabs/gluonts/security/dependabot/20
• https://github.com/awslabs/gluonts/security/dependabot/21
• https://github.com/awslabs/gluonts/security/dependabot/22

Description of changes:

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Please tag this pr with at least one of these labels to make our release process faster: BREAKING, new feature, bug fix, other change, dev setup