bump npm dependencies