move npm/bower bump into Makefile (bug 1094266)