Bump dependencies that are known safe

Most of these would have been installed anyway, just making sure what
got shrinkwrapped is what others would experience.