update package.json to use latest