bump deps to latest versions