bump dependencies for recent fixes