bump versions of upstream dependencies

Fixes https://www.pivotaltracker.com/story/show/70676928