bump deps. zip-stream v0.5 adds initial ZIP64 logic which is still experimental.