bump dependencies, especially `esl` version
4.2.0