bump dependencies' versions