Make non-dev deps in package.json match lockfile

Author: AndrewFerr

package.json

@@ -26,9 +26,9 @@
   "author": "matrix.org",
   "license": "Apache-2.0",
   "dependencies": {
-    "body-parser": "^1.20.4",
-    "express": "^4.22.1",
-    "js-yaml": "^4.3.0",
+    "body-parser": "^1.20.6",
+    "express": "^4.22.2",
+    "js-yaml": "^4.3.1",
     "morgan": "^1.11.0"
   },
   "devDependencies": {