package: bump dependencies