upgrade dependency versions