chore: update package-lock.json