update deps
ignore peers who report maliciously large metadata
2.5.0