rollback semver version to avoid client vendor.js breakage - refs https://github.com/isaacs/node-semver/pull/49