update dependency and bump version