build(deps): bump crypto-js and merkletreejs

Bumps [crypto-js](https://github.com/brix/crypto-js) to 4.2.0 and updates ancestor dependency [merkletreejs](https://github.com/miguelmota/merkletreejs). These dependencies need to be updated together.


Updates `crypto-js` from 3.3.0 to 4.2.0
- [Commits](brix/crypto-js@3.3.0...4.2.0)

Updates `merkletreejs` from 0.2.32 to 0.3.11
- [Commits](https://github.com/miguelmota/merkletreejs/commits)

---
updated-dependencies:
- dependency-name: crypto-js
  dependency-type: indirect
- dependency-name: merkletreejs
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

lib/openzeppelin-contracts-upgradeable/package.json

@@ -77,7 +77,7 @@
     "keccak256": "^1.0.2",
     "lodash.startcase": "^4.4.0",
     "lodash.zip": "^4.2.0",
-    "merkletreejs": "^0.2.13",
+    "merkletreejs": "^0.3.11",
     "micromatch": "^4.0.2",
     "prettier": "^2.3.0",
     "prettier-plugin-solidity": "^1.0.0-beta.16",