bump all package.json dependencies