bump deps

Signed-off-by: Phan Le <ple@pivotallabs.com>