Bump dependencies

Signed-off-by: Ruth Byers <rbyers@pivotallabs.com>