bump depdendencies