Update dependency commit hashes in README