bump deps, closes #4