update dependencies
mark as private in order to avoid NPM warnings