clarifying dependency versions