update package.json and dependencies