dependency update (core)