bump versions of dependencies