update dependencies
no need to cache this, and it causes a bug in tests