dependency and version bumps