glob@3.2.9

Fixes mark:true regression that kills readmes
package.json: Use tildes for npm's own deps

While it's perfectly fine to expect that people update their npm
versions in order to install OTHER things, npm itself is frequently
installed using older versions of npm.  Give it another year or so
before we can use this feature internally.