unpinned dependencies for circus-web