package.json: fix down module versions, also version bump