bump dependency versions
add Permissions and Codebase properties to the manifest (required starting with 7u25)