bump deps
copy the fetched source into the container