package.json fix: version numbers for dependencies