[fix] use username/appname and bump deps