various dependency updates
add missing guava change log entry