use 3.5.9 version so that next bump will update npm properly