more dependency updates [ci skip]