npm bump and dependency fix