fix dependency versions