bump versions in package.json