bump package dependency