package: update dep versions