Add upper bounds to dependency version ranges