bump to allow latest semver@4.2.0