bump extlib version to resolve security issue with YAML inside XML problem.