another day, another dependency update. can we all just agree to stop breaking the internet with our "minor" releases? seriously, i just want to ship something without worrying about 50 indirect packages falling apart.