[npm] bump patch version