cannot update highlight.js to a non-vulnerable version

[njzjz]

Dependabot cannot update highlight.js to a non-vulnerable version
The latest possible version that can be installed is 9.18.5 because of the following conflicting dependencies:
hexo-reference@1.0.4 requires highlight.js@^9.4.0 via a transitive dependency on hexo-util@0.6.3
The earliest fixed version is 10.4.1.

Please update the version of hexo-uti;