* update server and client package dependencies due to CVE notifications * update runtime dependencies * add some information to various readmes (e.g. about the client being part of the bundle)
