update deps
move ChangeLog out