updated dependencies to fix vulnerabilities