Switch to https for deps

Using https for dependencies on GitHub is preferable, as some poor saps (like me) are stuck behind corporate firewalls, which block the git protocol.

Doing a quick search this is a very common thing to block, oddly enough. Using https doesn't negatively impact the normal use case, either.