mandatory npm bump