nss: fix dependency version