winter cleanup: update dependencies