No ticket: Update thor to address vulnerability

[patsier-cms]

Ticket

Fixes vulnerability that's currently failing the build

Changes

• More granular update of thor than [Snyk] Fix for 1 vulnerabilities #843 if we want to get that in sooner without addressing as many changes

Context for reviewers

Wanted to open a quick fix to hopefully get this addressed with less review than automated PRs currently

Acceptance testing

• No acceptance testing needed
  • This change will not affect the user experience (bugfix, dependency updates, etc.)
• Acceptance testing prior to merge
  • This change can be verified visually via screenshots attached below or by sending a link to a local development environment to the acceptance tester
  • Acceptance testing should be done by design for visual changes, product for behavior/logic changes, or both for changes that impact both.
• Acceptance testing after merge
  • This change is hard to test locally, so we'll test it in the demo environment (deployed automatically after merge.)
  • Make sure to notify the team once this PR is merged so we don't inadvertently deploy the unaccepted change to production. (e.g. :alert: Deploy block! @ffs-eng I just merged PR [#123] and will be doing acceptance testing in demo - please don't deploy until I'm finished!)

[millerti]

Even if thor isn't necessary, I did a quick runthrough on sandbox and didn't see any issues. LGTM