Upgrade to latest msys2 packages

This includes bash CVE fixes.