update dependencies, nail down node-ical version to 0.18.0 (#3566)

- node-ical use `0.18.0` instead of `^0.18.0` in `package.json`
- cleanup `package-lock.json`

.github/workflows/dep-review.yaml

@@ -16,3 +16,5 @@ jobs:
         uses: actions/checkout@v4
       - name: "Dependency Review"
         uses: actions/dependency-review-action@v4
+        with:
+          allow-ghsas: GHSA-8hc4-vh64-cxmj