bump deps, compatibility fixes