update npm dep, bump version