bump deps: glob, minimatch