Ensure to have secure dependencies (decompress & download)

[preshetin]

What did you implement

Update to secure versions of decompress & download dependencies.

Closes #7402

How can we verify it

Run npm audit and you'll get this in the end (no high severity):

found 25 vulnerabilities (24 low, 1 moderate) in 8084 scanned packages
  run `npm audit fix` to fix 24 of them.

Todos

Useful Scripts

• npm run test:ci --> Run all validation checks on proposed changes
• npm run lint:updated --> Lint all the updated files
• npm run lint:fix --> Automatically fix lint problems (if possible)
• npm run prettier-check:updated --> Check if updated files adhere to Prettier config
• npm run prettify:updated --> Prettify all the updated files

• Enable "Allow edits from maintainers" for this PR
• Update the messages below

Is this ready for review?: YES
Is it a breaking change?: NO

[neverendingqs]

FYI it sounds like this is done as part of every release: #7531 (comment)

[preshetin]

@neverendingqs thanks Mark for letting me know. So should I better close this PR?

[neverendingqs]

@preshetin yes I believe so.

[Besiara]

Why you closed this PR, looks like the issue still persists. A version of download should be updated to 8.0.0