loosen deps

if anything breaks, just bump a patch