nss: version bump, fix unused direct dependency