update package.json deps