updates dependencies in package.json