update 3rd-party dependency Q