Bump upstream dependencies to Ca