Adding oniguruma package to fix CVE findings

@jweatherford

I resubmitted to fix one last CVE findings. Please merge it to DEV.

Thank you again for your support