update deps for tar.xz sources