update deps
use pull-core instead
1.1.3