another pub dependency update