bump deps due to openssl vulnerability