upgrade dependencies and bump version