update bootstrap recipe allowed list and version bump