bump tar and fstream deps