Bump upstream dependencies