update dependencies in package.json