update frozen npm dependencies