update ycb & arrow dependencies for new multi-token descriptor usage