node/slim: bump npm dep