bump dependencies

Signed-off-by: Dave Liebreich <dliebreich@pivotallabs.com>