npm package dependency fix: version bump