Use pessimistic version operator for dependencies

Instead of allowing any future version of dependencies, be pessimistic.