bump deps
package.json tweaks