bump dependencies, update .gitignore