updating third-party and package.json