fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-NORMALIZEURL-1296539

Author: snyk-bot

package-lock.json

@@ -52,7 +52,7 @@
     "lil-env-thing": "^1.0.0",
     "liquid": "^5.1.0",
     "lodash": "^4.17.21",
-    "mini-css-extract-plugin": "^0.9.0",
+    "mini-css-extract-plugin": "^1.1.0",
     "mkdirp": "^1.0.3",
     "morgan": "^1.9.1",
     "node-fetch": "^2.6.1",