Bump dependencies

`send` deprecated the usage of `.root()` so code change was needed