deps: update lotus to 0.4.x