[dep] bump dependencies