update release notes and slim down dependencies
fix sshkeypair parsing, bump