bump nl dependency to latest sha

should be no real difference