Cleaned up dependencies, resolved 35 security alerts

Also retired the old news/events ingestion code now that it runs from its own dedicated service — one less thing to keep patched here.