update dependencies + install dependencies in venv, not globablly