bump pub spec dependencies