upgrade package.json