upgrade transitive dependency