don't pin iso8601 now that there's a new release