bumping NPM package versions