bump dependencies to latest versions