patch bump for npm