package.json: bump version