apply patches at deployment