nss: version bump