setup: bump dependencies to latest versions