bump passenger dependency version