npm: bump version. technically an incompatible change, so major+.