bholloway update locked dependencies