loosen varnish version dep