bumping candlepin-deps version