bump when and curl versions