Bump third party dependencies

I bet you could also just do `return (Q.nfcall(tmp.dir, {unsafeCleanup : true}).get(0)` but lol whatever thxbye