specify version constraints for our dependencies