Loosen dependency versions

Severely out of date dependencies make `npm dedupe` fail for many upstream projects (`istanbul`, in this case).

Loosening the dependency to any minor revision helps avoid this failure, while not impacting functionality whatsoever.