Track revision updates for dependencies

If things are using semver, these should be harmless updates.