bumping dependency versions