bump Vigra dependency to 1.9.0