update to new xml-{dsig,c14n} api and lock versions
bump version