releasing 1.3.7

fix commiting DEPENDENCY_URLS file during release