fix cve thing

package-lock.json

@@ -12,7 +12,7 @@
         "@wecom/crypto": "^1.0.1",
         "crypto-random-string": "3.3.1",
         "fast-xml-parser": "^4.0.6",
-        "file-type": "^16.5.3",
+        "file-type": "16.5.4",
         "form-data": "^4.0.0",
         "koishi-thirdeye": "^11.1.24",
         "raw-body": "^2.5.1"

package.json

@@ -73,7 +73,7 @@
     "@wecom/crypto": "^1.0.1",
     "crypto-random-string": "3.3.1",
     "fast-xml-parser": "^4.0.6",
-    "file-type": "^16.5.3",
+    "file-type": "16.5.4",
     "form-data": "^4.0.0",
     "koishi-thirdeye": "^11.1.24",
     "raw-body": "^2.5.1"