Bump dependency versions more

Signed-off-by: Anders Kaseorg <andersk@mit.edu>