package.json: update dependencies