update deps
support sublevels, and plugin manifests