expanded dependency version bounds