update dependency, license