Remove some deprecated `String.set`s

Added `bytes` package to OASIS deps.