This updates pango/cairo/harfbuzz in the container image for CI, but doesn't bump the required dependencies.