set base dependency upper bound