boostrap: use local carton
Update dependencies