[dist] update dependencies and dont rely on git url