Update `npm` to support '^' in dependency versions