security - update some dependencies