dependencies upgrades, version bump