bump friend version due to guice's maven repo fuck-up"