bump deps

i may want to check out lkgr on git instead of svn, but that could break
something between syncs