Build: Bump third party deps (apache#2127)

In apache#2125 we got a warning
from the google-auth package, and we're on `1.6.3` while `2.40.3` is out
there. So maybe good to bump everything 👍

<!--
Thanks for opening a pull request!
-->

<!-- In the case this PR will resolve an issue, please replace
${GITHUB_ISSUE_ID} below with the actual Github issue id. -->
<!-- Closes #${GITHUB_ISSUE_ID} -->

# Rationale for this change

# Are these changes tested?

# Are there any user-facing changes?

<!-- In the case of user-facing changes, please add the changelog label.
-->

Author: Fokko