Bump pilfer dependency