bump deps; can use a public bucket with no auth

[#77518450]
deps
switch to busybox for image