update dependencies so npm shrinkwrap will pass