package.json: dependencies: update semver, async and valentine