locked package versions, bump version, upgrade server.json to match new mixdown-server format