update lock file dependencies