package.json: update dependencies to prevent major version increase without testing