updates.package: Allow sloppy semvers