update npm deps too