Pull in further dependency updates from certik