bump third-party after recent folly change

Needed for static linking.