bump dependency limit