Update winchan

This includes a security fix that was deployed to production yesterday.