depend on released colander version rather than a checkout