Update spelling dependencies (#2849)

This is the result of `npm audit fix` to address vulnerability in older versions
of `braces`.

Co-authored-by: Jeremy Meng <yumeng@microsoft.com>