update dependencies

Signed-off-by: Joshua Rubin <jrubin@zvelo.com>