bump deps (no breaking changes from their side this time so no need to re-release - also just for tests)