Revert "pin down dependency versions"

This reverts commit c8881cad22956467c875a8726cda515f6e59fa52.
Removing bot until pub plays nicely or version constraints are fixed.