Bump dependencies that are known safe

Most of these would have been installed anyway, just making sure what
got shrinkwrapped is what others would experience.

package.json

@@ -32,8 +32,8 @@
   },
   "dependencies": {
     "commoner": "^0.9.4",
-    "esprima-fb": "^4001.1001.0-dev-harmony-fb",
-    "jstransform": "^6.0.0"
+    "esprima-fb": "^4001.3001.0-dev-harmony-fb",
+    "jstransform": "^6.0.1"
   },
   "devDependencies": {
     "benchmark": "~1.0.0",
@@ -41,7 +41,7 @@
     "coverify": "~1.0.4",
     "envify": "^2.0.0",
     "es3ify": "~0.1.2",
-    "es5-shim": "^3.4.0",
+    "es5-shim": "^4.0.0",
     "grunt": "~0.4.2",
     "grunt-cli": "~0.1.9",
     "grunt-compare-size": "~0.4.0",