Update bower.json to depend on Dojo >=1.8.9

This is intended to encourage users to update to a version of Dojo that
incorporates the fixes for XSS vulnerabilities in dojox, although these
vulnerabilities do not directly affect dgrid at all.

(cherry picked from commit 342e344a92fe29f312937cb1fc780c4efb644451)