[spring] bump dependencies