Upgrades packages for word-wrap and tough-cookie

[anthonyburchell]

This PR bumps everything to their latest minor version which solves the two open dependabot alerts on phpcompat.