fix dependency versions (package.json)