upgrade packages.json