update package.json with proper deps versions