fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MOMENT-2944238

package.json

@@ -36,7 +36,7 @@
     "@nextcloud/jcrop": "^0.10.0",
     "@nextcloud/l10n": "^1.4.1",
     "@nextcloud/logger": "^2.1.0",
-    "@nextcloud/moment": "^1.1.1",
+    "@nextcloud/moment": "^1.2.1",
     "@nextcloud/password-confirmation": "^1.0.1",
     "@nextcloud/paths": "^2.1.0",
     "@nextcloud/router": "^2.0.0",
@@ -64,7 +64,7 @@
     "jstimezonedetect": "^1.0.7",
     "lodash": "^4.17.21",
     "marked": "^4.0.7",
-    "moment": "^2.29.1",
+    "moment": "^2.29.4",
     "moment-timezone": "^0.5.34",
     "nextcloud-vue-collections": "^0.9.0",
     "p-limit": "^4.0.0",