chore(deps): bump client deps

closes #639