bump dep versions