bump dependency versions for apache commons libs