update a dependency