dependency, version bump