loosening the version constraints on module dependencies

the stdlib dependency lock on 2.x is waaaay out of date