bump dependencies to latest