update CHANGELOG for recent dep bumps