bump a range of dependencies, all tests still pass