relaxing yui dependency to support 3.x

the yui version installed at the app level should win, so users will have full control.