update package.json and exclude hidden update file