update several dependencies

The quest to avoid SemVer '0.x' magic continues.