Fix unnecessarily specific dependency

According to semver, x.Y.z updates should be backwards-compatible. At the very least, x.y.Z updates (~> 3.5.0) should be allowed in order to obtain bug fixes.