bump deps (#2476)