bump package.json