bump shell and html-validation dependencies