adding pessimistic versions for dependencies