bump deps
show license names even if .anderson.yml isn't present