Dependency updates

As @gsteinacker remarked, test dependencies are not transitive ...