package: bump `ws` to fix fd leaks