update deps (except chai)

.ncurc.json

@@ -0,0 +1,7 @@
+{
+  "reject": [
+    "chai v5.0 switched to ESM, and we're not ready for that yet",
+    "chai",
+    "@types/chai"
+  ]
+}

package.json

@@ -73,12 +73,12 @@
     "@types/globule": "^1.1.9",
     "@types/he": "^1.2.3",
     "@types/mocha": "^10.0.6",
-    "@types/node": "^20.10.4",
+    "@types/node": "^20.10.6",
     "@types/progress": "^2.0.7",
     "@types/tmp": "^0.2.6",
     "@types/xmldom": "^0.1.34",
-    "@typescript-eslint/eslint-plugin": "^6.14.0",
-    "@typescript-eslint/parser": "^6.14.0",
+    "@typescript-eslint/eslint-plugin": "^6.16.0",
+    "@typescript-eslint/parser": "^6.16.0",
     "@xmldom/xmldom": "^0.8.10",
     "chai": "^4.3.10",
     "chai-as-promised": "^7.1.1",
@@ -102,11 +102,11 @@
     "tmp": "^0.2.1",
     "typedoc": "^0.25.4",
     "typescript": "^5.3.3",
-    "xpath": "^0.0.33"
+    "xpath": "^0.0.34"
   },
   "dependencies-note": "@types/luxon is a proper dependency, not devDependency, as our exported TypeScript typings reference luxon types. See <https://github.com/photostructure/exiftool-vendored.js/pull/108>",
   "dependencies": {
-    "@photostructure/tz-lookup": "^8.0.0",
+    "@photostructure/tz-lookup": "^9.0.0",
     "@types/luxon": "^3.3.7",
     "batch-cluster": "^12.1.0",
     "he": "^1.2.0",