update dependencies
allow upper-case prefix to support repo like mozilla/metrics-graphics