'bundle update' all the things

...except icalendar, because updating it makes tests fail