update locked dependencies