Update version of dataflow we depend on.

The primary change needed to accomodate the new dataflow api is to how we
handle side inputs.
Is this one of those can't-happen `IOException` since the input stream is actually just operating on a byte array? you could comment that if so. If there could be real `IOException`, is it reasonable to propagate that to the caller and put it in the `getValue` method signature?