deps: bump deps and update lockfiles