bump dependencies

Signed-off-by: Bo-Yi Wu <appleboy.tw@gmail.com>