update pubspec to use pub