bump in package.json