update package.json dependencies