update dependency
enforce https