tiny dependency version bump