upgrade some 3rd parties dependencies