[dist] bump vows and winston