Bump dependencies. Release as 0.9.6.3.
Merge remote-tracking branch 'upstream/0.9-stable' into nonascii-filenames