update and lock depdency