bumps to dependencies