Add version bounds to dependent-sum dependency