package.json: Use 'x' syntax to get patches

When a package is updated, but keeps backward compatability
(according to semver), it should be safe to simply update it.
Rely on this to keep up to date when dependencies are updated.