loosen dependency semvers