update dependencies and pin foreman